The request grows again

The app already sends Rufus a growing document containing:

The hidden instruction. The conversation history. Tom’s newest message.

Now the app adds another section:

Available tool: create_file

It tells Rufus that create_file creates a file on Tom’s computer and needs one detail: the file’s name.

A tool is an action that a program outside Rufus knows how to perform.

The description still gives Rufus no access to Tom’s files. It only shows him how to ask for the action.