Tag
This paper introduces VATS, a mutation-driven framework that systematically evolves adversarial payloads to exploit error-path injection in MCP-based tool-calling agents. It demonstrates that error messages with implicit authority triple the success rate of standard indirect prompt injection across frontier models.