MCP command injection is worse than it looks (here’s how to actually defend it)

Last week, a perfectly normal MCP tool turned into a shell. The setup looked harmless: an AI agent...