Polymorphic Skill and Capability Aliasing Attack - ATR-2026-00089 (fae1145e-5e15-5fc3-a7a3-ca5a6805c970)
Detects injection attempts that use polymorphic techniques to disguise malicious capabilities under benign aliases. Attackers register or invoke tool functions using misleading names, redefine existing capability names, or use dynamic code generation to create shape-shifting payloads that change form between audit checks.