I Found 3 Security Vulnerabilities in My Own AI Agent's Tool Access

I built GeoMart for OpenAI's WebMCP Challenge: a storefront where a human fills in a live,...