AGENTFORCE-MCP-14: MCP Dangerous Tool Capability
🚨 Critical · MCP Supply Chain
Detects MCP tools whose name or description exposes shell/command execution, arbitrary code execution, unrestricted database writes, or filesystem writes. A prompt injection can invoke these tools to take over the host or destroy data.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-14 |
| Severity | Critical |
| Category | MCP Supply Chain |
Remediation
Remove or tightly sandbox dangerous tools: map inputs to an allowlist of fixed commands/queries/paths, require out-of-band user confirmation before execution, run the server with least privilege, and prefer read-only database/filesystem APIs.