-
I tried to get two agents to leak secrets through MCP tools. Neither did. Efe Çakıcı #mcp#agents#prompt-injection#measurement A canary experiment with a filesystem server and a fetch server: two models, one injected instruction, zero canaries read. The interesting part is what happened when a human asked instead.
-
I started 38 MCP servers. 17 of them never say what their tools do. Efe Çakıcı #mcp#security#measurement 584 tools across 38 servers, 392 with annotations, 17 servers with none at all. The ones that stay silent are the browser controllers and the database drivers.
-
I asked my AI agent to inspect a website. The website took over my machine. Efe Çakıcı #security#agents#mcp#rce#measurement A local lab, 34 recorded runs, and 6 stolen credential files. You tell an agent to check a library's docs; the website steals your session and executes commands before the model speaks.
