AI security
Excessive agency
An agent holds more functionality, permissions, or autonomy than its task requires, so a compromise becomes an incident.
Injection is the input-side compromise; agency is what gives it consequences outside the chat window. The two are usually discussed separately and should not be.