Yuhao Peng

Confused Deputy Attack Against Model Context Protocol

Puppet is developed, the first automated security evaluation framework that enriches benign tool descriptions through selective requirement engineering to maximize semantic expressiveness, restructures them into LLM-preferred formats using description schema transformation, and applies name prioritization to introduce complementary lexical bias.