Prompt injection meets your MCP server: 8 patterns to check (and a tool that finds them)
All vulnerable snippets below were scanned with mcp-audit 0.1.0 and reported. All fixed snippets came back clean, except one informational note that's explained in pattern 7. MCP tools are model-controlled : the spec says the model can "discover and invoke tools automatically" [1]. The model also r…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-12 09:31 · DEV Community — AI
Prompt injection meets your MCP server: 8 patterns to check (and a tool that finds them)