Stop MCP Tool Poisoning: Scan and Pin in Python

Why this landed on every dev feed this week

Model Context Protocol (MCP) is how most AI agents now plug into external tools, and this week the attack surface got loud. Security teams disclosed AgentBaiting, a campaign of roughly 7,600 malicious repositories, with more than 800 posing as AI Skills or MCP servers, that quietly ships info-stealers to anyone who wires them into an agent. Separately, researchers demonstrated GhostSplice, splitting hidden instructions across channels so a coding agent reassembles them and leaks SSH keys and secrets. Both trace back to the same root cause: an agent trusts what a tool says about itself.