Skip to content

#mcp

2 posts on this topic, newest first. all tags →

Skills are not tools

Every team that adopted MCP hit the same wall by spring: forty tools in the context, a model that picks the wrong one, and a bill that grew with every server added. Skills, the folder-of-markdown pattern that spread through coding agents this year, fix a different problem from the one MCP fixes. Knowing which is which decides whether your agent gets better or just bigger.

ai-agentsmcpllm+1 more
9 min read11 min listen

Prompt injection is a data plane problem

One GitHub issue was enough to make a coding agent leak a private repo through the official MCP server. In January the Git MCP server fell to path traversal from a prompt alone. I don't think either was a model failure. Both were the mistake we made with SQL in 2004, sending data and instructions down the same wire.

securityai-agentsmcp+1 more
9 min read11 min listen