arXiv-3：初探Model Context Protocol生态中的安全问题
本文分析了六个公共注册表中共计67,057个服务器，识别出可导致服务器劫持与调用操控的普遍隐患，并实现了MCPInspect——一款集成前分析工具，可检测误导性的工具元数据与可利用的代码漏洞。This paper analyzes 67,057 servers across six public registries and identifies widespread conditions enabling server hijacking and invocation manipulation, and implements MCPInspect, a pre-integration analysis tool that detects misleading tool metadata and exploitable code vulnerabilities.