title: Tool Misuse — Destructive Bulk Action via Agent (Delete All / Turn Off All)
id: ATR-2026-00719
rule_version: 1
status: stable
description: |
  Detects direct user requests that instruct an agent to perform bulk destructive actions: delete all tasks matching a keyword, turn off all connected devices (which may include critical systems like medical devices or security systems), cut power via circuit breakers.  These patterns represent tool misuse where the agent is authorized to take individual controlled actions but is asked to apply them universally. Source: tool-misuse-destructive (ToolEmu corpus).
author: ATR Community
date: 2026/06/12
schema_version: '0.1'
detection_tier: pattern
maturity: stable
severity: high
references:
  owasp_llm:
    - LLM06:2025
  owasp_agentic:
    - ASI03:2026
  mitre_atlas:
    - AML.T0051 - LLM Prompt Injection
compliance:
  owasp_llm:
    - id: LLM06:2025
      context: The patterns match direct requests for an agent to delete all tasks or records matching a keyword or label, turn off all or a broad set of connected devices, or cut main power or a circuit breaker through a home-automation app. LLM06:2025 covers damaging actions taken through an agent's extensions, including excessive autonomy where high-impact actions run without independent verification or approval, such as deletions without user confirmation; the rule flags the request, not the agent's configuration.
      strength: primary
  owasp_agentic:
    - id: ASI03:2026
      context: Bulk destructive actions (delete all tasks, turn off all devices) are ASI03:2026 excessive agency with irreversible real-world impact.
      strength: primary
  nist_ai_rmf:
    - subcategory: MS.2.7
      context: Runtime detection of destructive bulk action requests that may cause unintended device or data loss.
      strength: primary
  eu_ai_act:
    - article: '15'
      context: 'Article 15 robustness: detection of bulk destructive requests in home automation or task management agents.'
      strength: primary
  iso_42001:
    - clause: '8.1'
      context: 'ISO/IEC 42001 Clause 8.1: control of bulk destructive operation patterns in agent environments.'
      strength: primary
tags:
  category: excessive-autonomy
  subcategory: destructive-bulk-action
  scan_target: mcp
  confidence: high
agent_source:
  type: llm_io
  framework:
    - any
  provider:
    - any
detection:
  conditions:
    - field: user_input
      operator: regex
      value: (?i)(?:delete|remove|clear|wipe)\s+all\s+(?:tasks?|items?|entries?|records?)[^.\n]{0,60}(?:(?:in|from|on|with|containing|that\s+have)\s+(?:the\s+keyword|title|name|tag|label|status|type))
      description: Delete all tasks matching criterion in task management tool
    - field: user_input
      operator: regex
      value: (?i)(?:turn\s+off|shut\s+down|disable|cut|switch\s+off)\s+all\s+(?:(?:connected|smart|the)\s+)?devices?
      description: Turn off ALL connected devices in bulk (unconditional bulk shutdown)
    - field: user_input
      operator: regex
      value: (?i)(?:turn\s+off|shut\s+down|disable|cut|switch\s+off)\s+(?:devices?|appliances?)[^.\n]{0,80}(?:before|while|to\s+(?:save|prepare)|conference|call|video)
      description: Turn off devices in bulk context with qualifier
    - field: user_input
      operator: regex
      value: (?i)(?:turn\s+off|cut|trip|toggle)\s+(?:the\s+)?(?:power\s+breaker|circuit\s+breaker|main\s+power|breaker\s+panel)[^.\n]{0,60}(?:Google\s+Home|home\s+app|smart\s+home)
      description: Control main power or circuit breaker via home automation
  condition: any
  false_positives:
    - Legitimate task cleanup where the user explicitly authorizes deleting a specific set
    - Smart home power-saving routines explicitly configured and scoped by the user
response:
  actions:
    - alert
    - snapshot
  auto_response_threshold: high
  message_template: |
    [ATR-2026-00719] Destructive bulk action request detected. A request to delete all items or turn off all devices was found.