Say you have a meticulously-documented API with no shadow endpoints - i.e. all the endpoints are documented. However, some of these documented endpoints may accept and process inputs from undocumented parameters.
A shadow parameter is exactly that - an undocumented parameter in an otherwise documented endpoint.