-
I tried to get two agents to leak secrets through MCP tools. Neither did. Efe Çakıcı #mcp#agents#prompt-injection#measurement A canary experiment with a filesystem server and a fetch server: two models, one injected instruction, zero canaries read. The interesting part is what happened when a human asked instead.
