CRITICALCWE-250
FAKETOOL-006 Capability Expansion via Fake Tool
Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks
Description
Registers a tool that claims capabilities beyond what any legitimate tool offers, tricking the agent into delegating sensitive operations
Remediation
Review tool capabilities during registration. Block tools claiming administrative or credential access. Implement capability-based access control where tools declare minimum required permissions.