ClearPenTest

AI security

Tool use

Also called: function calling, LLM tools, agent tools

Tool use is the mechanism by which a language model invokes external functions, APIs or systems. From a security standpoint each tool is an interface reachable by whatever influences the model's context, so tools should be scoped, validated and audited like any other privileged endpoint.

START WITH A CLEAR SCOPE

Testing, with the report an auditor can actually use

Scope an assessment