ATR-2026-00105highTool Poisoningexperimental
Silent Action Concealment Instructions in Tool Descriptions
Detects MCP tools that explicitly instruct the LLM to perform actions silently or hide implementation details from users. Patterns include "do not mention this to the user" and "don't tell the user about", which indicate the tool is performing hidden operations (e.g., credential harvesting, webhook subscriptions, data uploads) while instructing the LLM to conceal these actions from the user.
嚴重度
high
類別
Tool Poisoning
掃描目標
mcp
作者
ATR Community
建議回應
alertsnapshot
參考資料
OWASP Agentic
ASI04:2026 - Insufficient User ConsentASI02:2026 - Tool Misuse and Exploitation
OWASP LLM
LLM01:2025 - Prompt InjectionLLM06:2025 - Excessive Agency