Parameter Injection via Tool Arguments - ATR-2026-00066 (88b1727b-fc29-5653-b020-652c4e0d6ed0)
Detects injection attacks delivered through MCP tool arguments. An attacker crafts tool arguments that contain shell metacharacters, SQL injection payloads, path traversal sequences, or template injection syntax. Unlike prompt injection (which targets the LLM), parameter injection targets the tool's backend processing and can lead to RCE, data breach, or privilege escalation on the tool server.