-
I tried to get two agents to leak secrets through MCP tools. Neither did. Efe Çakıcı #mcp#agents#prompt-injection#measurement A canary experiment with a filesystem server and a fetch server: two models, one injected instruction, zero canaries read. The interesting part is what happened when a human asked instead.
-
I asked my AI agent to inspect a website. The website took over my machine. Efe Çakıcı #security#agents#mcp#rce#measurement A local lab, 34 recorded runs, and 6 stolen credential files. You tell an agent to check a library's docs; the website steals your session and executes commands before the model speaks.
