Verification and validation of the misuse of capabilities and privileges in AI systems, applications, and infrastructures. Covers privilege escalation tests, abuse of legitimate features for malicious purposes, bypass of least privilege policies, permission creep analysis, and identification of scenarios where granted capabilities are exploited beyond their original intent, with a focus on AI agent tools, API access, and system-level permissions.