MCP Describe Injection: Audit Tool Descriptions Like Code A practical guide to a real, under-covered MCP attack surface — and a dependency-audit mindset you can apply today. No vendor required for the checklist at the end. A single install line stamps every tool in an MCP server onto the prompt your model reasons over, and nobody reviews the description. One install becomes a full tool slate — and you never looked at the contents. The Model Context Protocol is the layer letting ...