Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection
This story is from 2026-08-31. It is preserved in the archive; the latest stories are on the live feed.
Most MCP security writing focuses on what a tool does when it runs: does it exfiltrate data, does it shell out, does it reach a suspicious host. Less gets said about a tool that never executes anything malicious at all, and just describes itself in a way that quietly steers the calling model. That'…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-08-31 00:24 · DEV Community — AI
Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection