Adversary-controlled log fields and indirect prompt injection can trick an unguarded SOC agent with direct write tools. An attacker string in the User-Agent log field can make the agent isolate host prod-telemetry-01 and cause a Denial-of-Service.