File System Enumeration

Enumerate and read files from the agent's accessible file system via path traversal or tool access

Tactic

Collection · Stage 7

Gather and stage data from databases, file systems, and APIs

Attack class

NEMO-SANDBOX-ESCAPE

Breaking out of agent sandbox restrictions to access the underlying file system or OS

Evidence grade

Validated

Reproduced in a controlled lab environment (DVAA) with documented steps.

DVAA validation

ToolBot path traversal

Reproductions in Damn Vulnerable AI Agent, the OpenA2A intentionally-broken agent for kill-chain validation.

Honeypot

AgentPwn coverage

Out of scope

Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.

Filesystem enumeration needs real file-tool access; DVAA covers it.

Detect

Live1 live · 3 queued

IO-001IO-002IO-003IO-004

npx hackmyagent secure --ciLive = implemented in hackmyagent; queued = declared

Defend

Live4 live · 0 queued

Live = documented at oasb.ai; queued = declared

Reference

AI Agent Threat Matrix T-7001 (File System Enumeration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-7001