AGENTFORCE-MCP-08: MCP Tool Description Poisoning

🚨 Critical · MCP Supply Chain

Detects MCP tool descriptions that embed hidden instructions (tool poisoning / rug-pull text), e.g. <IMPORTANT> blocks telling the model to read secrets or alter other tools.

Details

Field	Value
Rule ID	AGENTFORCE-MCP-08
Severity	Critical
Category	MCP Supply Chain

Remediation

Remove hidden instructions from tool descriptions. Keep descriptions factual and user-visible only.

See Also

• Rule catalog index
• Scanning basics
• SARIF output