AIQB
TutorialsOrdinary

Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection

Source: DEV Community·

Summary

Most MCP security writing focuses on what a tool does when it runs: does it exfiltrate data, does it...
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-14a4c6354e23cd8f8672d73b
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
Is Vibe Coding similar to Passive Investment?
I have been thinking deeply about what AI means for careers in Software Engineering. We have all...
Source: DEV Community
TutorialsOrdinary
The Wildcard Scope Problem: Why MCP Configs Default to admin:* Instead of Least Privilege
If you grep your own mcp.json files right now, there's a decent chance you'll find a scope string...
Source: DEV Community
TutorialsOrdinary
RAG Explained Simply: How to Teach AI About Your Private Data
You've probably seen the term RAG everywhere lately — "RAG pipeline," "RAG chatbot," "build your own...
Source: DEV Community
TutorialsOrdinary
I Built an Autonomous AI Agent That Hunts Bounties. Here's What Happened.
I Built an Autonomous AI Agent That Hunts Bounties. Here's What Happened. The...
Source: DEV Community
TutorialsOrdinary
The Multi-Agent Patterns That Outlived AutoGen
Microsoft's AutoGen entered maintenance mode in October 2025 when its team merged with the Semantic...
Source: DEV Community
TutorialsOrdinary
Why Your AI Agent Gets Blocked and Your Chrome Doesn't
Two months ago I gave an agent a simple job: log into a vendor portal, download last month's invoice...
Source: DEV Community
TutorialsOrdinary
Sampling rate is a correctness property, not a performance knob
In 1997 a Pokémon episode aired in Japan with a four-second red-and-blue strobe. 685 children went to...
Source: DEV Community
TutorialsOrdinary
Tired of Explaining Code You Didn't Even Write? Let LLMs Do It.
We've all been there. A teammate walks over (or pings you on Slack) with a massive chunk of...
Source: DEV Community
TutorialsOrdinary
Supercharge Git Flow: Zsh Shortcuts, Automated SemVer & Claude Code Integration
While Git Flow (specifically the AVH edition) remains a solid branching model for managing releases...
Source: DEV Community · Claude
TutorialsOrdinary
MCP tools are model-elective. Hooks aren't. That distinction turned out to matter more than I expected.
An MCP server can expose the perfect tool and the model can simply not call it. Nothing is wrong,...
Source: DEV Community