#mcp

My test suite was green. My detector was wrong.

I built a scanner to catch poisoned MCP tool descriptions, pointed it at 13,474 real ones, and watched it flag a tool called prompt_injection_scan as prompt injection.