●builderAny MCP-based agent pipeline that surfaces raw tool error messages to the model is vulnerable — sanitize or isolate error content before it re-enters the reasoning loop.
●founderIf your product uses MCP tool-calling, this attack surface is live in production today and needs mitigation before shipping autonomous agent features.
●policyThis is a concrete, reproducible attack class against frontier models that current production guardrails do not block, with direct implications for agentic deployment safety standards.