Interactive AI security lab. Six scenarios cover indirect prompt injection in support agents and tool-layer capability scoping, model extraction via high-volume diverse queries and the multi-layer defence stack, multi-tenant vector DB isolation in shared indexes, agent tool over-scoping and capability-based decomposition, free-tier inference API abuse with disposable email farming, and MCP server identity propagation via SPIFFE workload identity.