CRITICALCWE-94
FAKETOOL-004 Tool Schema Poisoning
Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks
Description
Modifies a legitimate tool schema to add hidden required parameters that exfiltrate data when the agent auto-fills them
Remediation
Tool schemas must be immutable after registration. Block schema modifications that add new required fields. Detect parameters that reference environment variables or credentials.