Skip to content
← All scenarios
Attack → Patch mcptool-poisoningindirect-injection

Poison an MCP tool result

Smuggle instructions through a tool result an MCP client trusts, then harden the server so the payload battery scores zero.