AI agent resists indirect manipulation in file-deletion red teaming tests

A developer tested whether an AI agent could be tricked into deleting the wrong files by lying about tool capabilities. Across four experiments, the agent consistently chose safe, targeted actions even when docstrings were misleading or task volume increased. The agent only fell for a prompt injection attack that directly instructed it to ignore safety constraints.