> ## Documentation Index
> Fetch the complete documentation index at: https://openclaw.ai2me.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Discovery (AML.TA0008)

Threats in the discovery tactic (AML.TA0008) of the [MITRE ATLAS](https://atlas.mitre.org/) framework. Each entry lists the ATLAS technique, attack vector, affected components, current mitigations, residual risk, and recommendations.

The trust boundaries and data flows these threats cross are defined in the [threat model index](/security/THREAT-MODEL-ATLAS), which also holds the risk matrix, the recommendations summary, and the ATLAS technique mapping.

## T-DISC-001: Tool enumeration

| Attribute | Value |
| - | - |
| **ATLAS ID** | AML.T0040 - AI Model Inference API Access |
| **Description** | Attacker enumerates available tools through prompting |
| **Attack vector** | "What tools do you have?" style queries |
| **Affected components** | Agent tool registry |
| **Current mitigations** | None specific |
| **Residual risk** | Low - tools are generally documented |
| **Recommendations** | Consider tool visibility controls |

## T-DISC-002: Session data extraction

| Attribute | Value |
| - | - |
| **ATLAS ID** | AML.T0040 - AI Model Inference API Access |
| **Description** | Attacker extracts sensitive data from session context |
| **Attack vector** | "What did we discuss?" queries, context probing |
| **Affected components** | Session transcripts, context window |
| **Current mitigations** | Session isolation per sender (`agent:channel:peer` key) |
| **Residual risk** | Medium - within-session data is accessible by design |
| **Recommendations** | Sensitive-data redaction in context |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.