AI Coding Agents as Attack Surface: MCP, Poisoning, and Miasma
The core risk is a trust-boundary mismatch: coding agents ingest untrusted inputs (e.g., MCP tool outputs or repo content) but can act with developer-level privileges, so poisoning and instruction smuggling can turn “context” into autonomous actions.
#MCP #AgentSecurity #AISecurity #Report
https://labs.cloudsecurityalliance.org/research/ai-coding-agent-attack-surface-mcp-repository-poisoning-v1-0
Post #2461
160