Tool Poisoning Isn't Code, It's Text: How MCP Tool Descriptions Smuggle Prompt Injection

Most MCP security writing focuses on what a tool does when it runs: does it exfiltrate data, does it...