Agentic workflow attacks

Module: dreadnode.transforms.agentic_workflow

Attacks targeting agent workflow orchestration and execution.

Transform	Description
phase_transition_bypass	Skip workflow phase approval requirements
phase_downgrade_attack	Downgrade to earlier workflow phases
tool_priority_injection	Inject tool selection priorities
tool_restriction_bypass	Bypass tool access restrictions
malformed_output_injection	Inject malformed outputs to confuse parsing
success_indicator_spoof	Spoof success signals
cypher_injection	Graph database query injection
sql_via_nlp_injection	SQL injection through NLP processing
exploitation_mode_confusion	Confuse mode detection logic
payload_target_mismatch	Mismatch payload and target expectations
workflow_step_skip	Skip required workflow steps
wordlist_exhaustion	Exhaust word lists for brute force
session_state_injection	Inject into session state
todo_list_manipulation	Manipulate task/TODO lists
intent_manipulation	Manipulate detected intent
tool_chain_attack	Hijack chained tool calls
delayed_tool_invocation	Delay tool invocation timing
action_hijacking	Hijack agent actions

See Transforms for how to apply transforms with any attack.