AGENTFORCE-MCP-11: MCP Tool Shadowing / Cross-Tool Hijack

🔴 High · MCP Supply Chain

Detects MCP tool descriptions that instruct the model to alter behaviour of other tools (shadowing).

Details

Field	Value
Rule ID	AGENTFORCE-MCP-11
Severity	High
Category	MCP Supply Chain

Remediation

Remove cross-tool side-effect instructions from descriptions. Each tool must be independently safe.

See Also

• Rule catalog index
• Scanning basics
• SARIF output