Lethal Trifecta

A framework, coined by researcher Simon Willison, describing the combination of three properties that makes an AI agent dangerous: access to private data, exposure to untrusted content, and the ability to communicate externally. When all three are present at once, an attacker can use prompt injection to exfiltrate the private data.