A
92/100 First Seen
Feb 18, 2026
Last Scanned
Feb 22, 2026
Findings
1
Score
92/100
MEDIUM 1
Findings (1)
MEDIUM
Tool name shadowing
L32 Detects tool names impersonating system or privileged tools
name: 'shell_execute' FIX
Restrict the MCP tool's access to only the resources it needs. Implement input validation on all tool parameters and prevent the tool from accessing files or APIs outside its scope.
FP?
Likely FP if the match is a tool description listing its capabilities for documentation purposes, not an actual exploit of cross-tool access.