Yes absolutely. And if you install an mcp server with a poorly written prompt, your sota llm might try to use it for everything. Prompt injection attacks will a

Yes absolutely. And if you install an mcp server with a poorly written prompt, your sota llm might try to use it for everything. Prompt injection attacks will also be a thing. Depending on how this all plays out, we're in for interesting times. The number of threads of people asking how to permanently accept all tool use so they don't have to accept them manually...