Third-Party Blast Radius
Tool & Affordance RiskDescription
Deep reliance on external APIs, data sources, and services creates vulnerability to those systems. Attacks on or failures of external dependencies propagate into agent behaviour; external data feeds become attack surface.
Agent relies on an unvetted financial data API that is compromised; poisoned price feeds cause erroneous trades.
Community researchers and independent evaluators have documented measurable behavioural drift in deployed commercial models (notably GPT-4) relative to their published model cards, with changes in refusal rates, reasoning styles, and capability scores not reflected in official documentation updates. No confirmed production harm incident is formally attributed to model card divergence alone.
Primary mitigations
- External dependency risk assessment
- fallback behaviours for unavailable dependencies
- input validation from external sources.
Detection signals
External Blast Radius Score; external API failure rate; data provenance validation coverage.