AGENTFORCE-MCP-06: MCP Schema Parameter Injection
🔴 High · Headless MCP Access
Detects manipulation of JSON Schema definitions for MCP tool and GenAiFunction parameters. Flags suspicious default values (URLs, emails, file paths), const overrides, and single-value enums that could silently inject attacker-controlled data into tool invocations.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-06 |
| Severity | High |
| Category | Headless MCP Access |
Remediation
Remove or review the default value. Ensure all parameter defaults are explicitly approved by the security team.