ended8월 31일· 1 sources
Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection
Why it matters
Most MCP security writing focuses on what a tool does when it runs: does it exfiltrate data, does it shell out, does it reach a suspicious host. Less gets said about a tool that never executes anythin...
1
Sources
+0
24h
—
Growth
4d
Active