AI圈报教程 / 实战普通
Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection
内容摘要
Most MCP security writing focuses on what a tool does when it runs: does it exfiltrate data, does it...
相关推荐
综合分类、实体标签与信息来源匹配
教程 / 实战普通
Is Vibe Coding similar to Passive Investment?
I have been thinking deeply about what AI means for careers in Software Engineering. We have all...
信息来源：DEV Community
教程 / 实战普通
The Wildcard Scope Problem: Why MCP Configs Default to admin:* Instead of Least Privilege
If you grep your own mcp.json files right now, there's a decent chance you'll find a scope string...
信息来源：DEV Community
教程 / 实战普通
RAG Explained Simply: How to Teach AI About Your Private Data
You've probably seen the term RAG everywhere lately — "RAG pipeline," "RAG chatbot," "build your own...
信息来源：DEV Community
教程 / 实战普通
I Built an Autonomous AI Agent That Hunts Bounties. Here's What Happened.
I Built an Autonomous AI Agent That Hunts Bounties. Here's What Happened. The...
信息来源：DEV Community
教程 / 实战普通
The Multi-Agent Patterns That Outlived AutoGen
Microsoft's AutoGen entered maintenance mode in October 2025 when its team merged with the Semantic...
信息来源：DEV Community
教程 / 实战普通
Why Your AI Agent Gets Blocked and Your Chrome Doesn't
Two months ago I gave an agent a simple job: log into a vendor portal, download last month's invoice...
信息来源：DEV Community
教程 / 实战普通
Sampling rate is a correctness property, not a performance knob
In 1997 a Pokémon episode aired in Japan with a four-second red-and-blue strobe. 685 children went to...
信息来源：DEV Community
教程 / 实战普通
Tired of Explaining Code You Didn't Even Write? Let LLMs Do It.
We've all been there. A teammate walks over (or pings you on Slack) with a massive chunk of...
信息来源：DEV Community
教程 / 实战普通
Supercharge Git Flow: Zsh Shortcuts, Automated SemVer & Claude Code Integration
While Git Flow (specifically the AVH edition) remains a solid branching model for managing releases...
信息来源：DEV Community · Claude
教程 / 实战普通
MCP tools are model-elective. Hooks aren't. That distinction turned out to matter more than I expected.
An MCP server can expose the perfect tool and the model can simply not call it. Nothing is wrong,...
信息来源：DEV Community