LoFP / a legitimate change in agent behavior, such as a new workflow, a bulk-processing task, or a prompt update that asks the model to call many tools in one turn, can produce a larger batch than the caller's history. confirm with the agent owner.

Techniques

Sample rules

AWS Bedrock Unusually Large Tool-Request Batch

• source: elastic
• technicques:

Description

A machine learning job has detected an unusually large number of tool requests generated in a single Amazon Bedrock model response for a caller, compared with that caller’s own history. Large batches can indicate over-invocation of tools by an AI agent, for example after prompt injection, ambiguous instructions, or unsafe delegation (OWASP ASI02, Tool Misuse and Exploitation). The count is requested operations in the model output, not confirmed tool executions.

Detection logic