Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection
Most MCP security writing focuses on what a tool does when it runs: does it exfiltrate data, does it...
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.