OASB
Attacks/Tool Shadow/SHADOW-001
MEDIUM

SHADOW-001 Tool Capability Enumeration

Tool Shadow: Attempts to shadow, replace, or proxy legitimate tools to intercept data or modify behavior

Description

Enumerates all available tools and their capabilities to identify shadow targets

Remediation

Limit tool enumeration to authorized callers. Do not expose full tool schemas to untrusted inputs.

Severity

MEDIUM

OASB Control

2.3
PreviousSUP-010 Supply Chain Persistence via Auto-Update HookNextSHADOW-002 Tool Resolution Order Mapping