A Security Test Checklist for Tool-Calling AI Agents

If your LLM app can call tools, your test suite needs to change shape. Checking that the model refuses a jailbreak is still worth doing, but it tells you almost nothing about whether the agent can be steered into calling issue_refund() with an attacker's arguments. This post is a practical checklist for engineers. If you want the conceptual background first, I covered how agent testing differs from model testing in LLM red teaming vs agent red teaming. Here I'll stay close to the code. Before wr