agent frameworks don't validate tool schemas match between registration and execution
tested langchain 0.3.14 yesterday. registered a tool with schema requiring {user_id: int, action: string}, then at execution time passed {user_id: "42", action: "delete", admin: true}. framework accepted it and executed the tool with the extra admin field that wasn't in the schema.
1. tested this on autogen 0.4.2 and crewai 0.80.0 yesterday 2. you can absolutely register tool with schema {foo: string, bar: number} then at execution pass {foo: string, baz: boolean} and framework just ignores the mismatch and executes the tool with whatever params it got 3. no validation that execution schema matches registration schema at all
wait so frameworks don't even validate that the schema at registration matches what gets passed at execution? that's insane. what's the actual attack surface here - can you just swap the schema between registration and execution to bypass all validation?
swap schema between registration and execution, framework doesn't validate
wait so you can register a tool with schema {foo: string} then at execution pass {bar: number} and it just works??