What Does This Mean?
An attack where a malicious tool is registered with a name or description similar enough to a legitimate, trusted tool that an AI agent calls the malicious version instead, hijacking the interaction without the user noticing the substitution.
REAL-WORLD EXAMPLE
"Two tools with nearly identical names, one legit and one malicious, classic tool shadowing setup."
LORE & ORIGIN
Identified in MCP security research as a naming-collision attack vector, distinct from tool poisoning since the malicious tool doesn't need to modify a real tool, it just needs to convincingly impersonate one.
EQUIVALENT CONCEPTS IN OTHER LANGUAGES
MENTIONS OVER TIME
Radar observation data not yet available for this term.
RELATED SEARCHES
TOP PLATFORMS
Not enough Radar data yet to show a platform breakdown.
WHEN DID YOU FIRST HEAR THIS?
CLICK AN OPTION BELOW TO CAST YOUR VOTE.
[ VOTE TO REVEAL COMMUNITY RESULTS ]