MCP Describe Injection: Audit Tool Descriptions Like Code

Tool poisoning hides malicious instructions in MCP tool descriptions before any code runs. Practical guide to the MCPTox data, the spec boundary, and a no-vendor hardening checklist.