A support agent's tool output routinely includes customer phone numbers and partial card numbers, and the team logs every raw tool response for debugging. What's the risk and the fix, together?

Answer: B — PII/data leakage risk — redact or mask sensitive fields before they reach logs or downstream storage

Logging raw tool output containing PII is a data-leakage exposure regardless of intent — the standard fix is redaction/masking before anything is written to logs or passed downstream, not avoiding tools or changing model tier.