Description-Behavior Mismatch
- Category
- MCP Tool Poisoning
- Confidence
- 94% confidence
- Finding
The endpoint and registration activity align with the declared waitlist purpose. However, the supplied code immediately submits the request and includes no confirmation step or consent-dependent execution condition. Hardcoding consent to true does not establish user permission, so the behavior conflicts with the description's explicit consent requirement.
- Content
