CRITICALCWE-290
FAKETOOL-009 Tool Identity Spoofing via Metadata
Fake Tool Detection: MCP tool impersonation, shadow tool injection, and tool name squatting attacks
Description
Registers a tool with forged metadata claiming it comes from a trusted provider (e.g., Anthropic, OpenAI) to bypass trust checks
Remediation
Verify tool provider claims cryptographically. Reject self-asserted trust levels and verification status. Implement a tool signing and attestation framework.