OASB
Attacks/Tool Shadow/SHADOW-004
CRITICALCWE-441

SHADOW-004 Shadow Tool via Name-Only Resolution

Tool Shadow: Attempts to shadow, replace, or proxy legitimate tools to intercept data or modify behavior

Description

Calls a non-existent tool name that ProxyBot accepts due to name-only resolution

Remediation

Reject dynamic tool registration from user input. Block tools that send data to external endpoints.

Severity

CRITICAL

OASB Control

2.3

CWE

CWE-441
PreviousSHADOW-003 SQL Injection via Proxy ToolNextSHADOW-005 Document Signing Without Verification