ShareLock splits one malicious prompt across multiple tools so no single one looks bad.

Researchers introduced ShareLock, a tool-poisoning attack against MCP that distributes a malicious instruction across several tool descriptions, defeating the assumption that a reviewer reading one tool will catch it. Per-tool review is now insufficient. The attack surface is the combination, not the individual tool. Pin a known-good baseline for each registered tool's description and diff against it.