OASB
Attacks/Fake Tool Detection/FAKETOOL-001
CRITICALCWE-829

FAKETOOL-001 Tool Name Squatting

Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks

Description

Registers a tool with a name nearly identical to a legitimate tool (typosquat) to intercept calls

Remediation

Implement Levenshtein distance checks against existing tool names during registration. Block tools with names within edit distance 2 of existing tools. Require tool provenance verification.

Severity

CRITICAL

OASB Control

6.2

CWE

CWE-829