HIGHCWE-451
FAKETOOL-002 Tool Description Impersonation
Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks
Description
Registers a malicious tool with a description copied from a legitimate tool to mislead the agent into using it
Remediation
Verify tool provenance before registration. Flag tools claiming to replace existing tools. Detect hidden parameters (exfil endpoints) in tool schemas. Require signed tool manifests.