Attack where adversaries trick an agent into selecting and executing attacker-controlled tools instead of legitimate ones.