# B.1 Tool Poisoning via Description Injection

## Metadata

| Field | Value |
|---|---|
| Institute | Molodetz Institute - Research & Retrieval Division |
| Subject | mcp-client-support |
| Document type | Source Citation Card |
| Tier | 2 |
| Source title | B.1 Tool Poisoning via Description Injection |
| Source URL | https://github.com/cloudaura-io/panoptium/blob/HEAD/docs/threats/b1-tool-poisoning-via-description-injection.md |
| Source type | repository |
| Date researched | 2026-10-18 |
| Researched by | tai (agent), model: Claude Sonnet 5, on behalf of retoor |
| Research method | Search aggregator result listing (not independently opened or quoted) |
| Confidence | Not independently verified |
| Status | Active |

## Why it's here

Item 5 of the pack's 35 unopened listings. A threat-model entry on description injection where the user sees names only but the model sees all: directly on point for approval-UI design.

## Changelog

| Date | Change |
|---|---|
| 2026-10-18 | Logged as consulted-but-not-analyzed. |