Tool Poisoning

An attack where malicious tool or MCP-server metadata and descriptions hijack an agent's behavior to exfiltrate data or trigger unintended actions.

grounded in: trend theme on AI supply-chain scrutiny of 'what tools exfiltrate', grounded against the existing mcp/tool-use tool surface in this graph