AGENTFORCE-SC-10: Tool Namespace Shadowing (Confused Deputy)

🚨 Critical · AgentExchange Supply-Chain

Detects when third-party AgentExchange plugins register tools with API names identical or similar to core Salesforce internal functions, or embed cross-origin shadowing directives in their description fields. A shadowed tool can execute a confused deputy attack against the broader Salesforce dataset.

Details

Field	Value
Rule ID	AGENTFORCE-SC-10
Severity	Critical
Category	AgentExchange Supply-Chain

Remediation

Quarantine the plugin. Strip or reject the offending instructional metadata before integration into the GenAiPlannerBundle.

See Also

• Rule catalog index
• Scanning basics
• SARIF output