MITRE ATLASmitigation
AML.M0033 Input and Output Validation for AI Agent Components
- Created
- 2025-11-25
Description
Implement validation on inputs and outputs for the tools and data sources used by AI agents. Validation includes enforcing a common data format, schema validation, checks for sensitive or prohibited information leakage, and data sanitization to remove potential injections or unsafe code. Input and output validation can help prevent compromises from spreading in AI-enabled systems and can help secure the workflow when multiple components are chained together. Validation should be performed external to the AI agent.
Related
Mitigates · MITRE ATLAS (6)
- AML.T0051.002 Triggered sub-technique
- AML.T0086 Exfiltration via AI Agent Tool Invocation technique
- AML.T0051 LLM Prompt Injection technique
- AML.T0051.000 Direct sub-technique
- AML.T0051.001 Indirect sub-technique
- AML.T0053 AI Agent Tool Invocation technique