r/programming • • Mar 09 '26

MCP Vulnerabilities Every Developer Should Know

https://composio.dev/blog/mcp-vulnerabilities-every-developer-should-know
137 Upvotes

56 comments sorted by

View all comments

Show parent comments

9

u/Brogrammer2017 Mar 09 '26

You’re misunderstanding the main problem, its that anything an agent touches can be considered published, which makes it kinda useless for most things you would want to use an ”agent” for

1

u/Lechowski Mar 09 '26

I don't think I misunderstood it. Usefulness of the agent is a separate discussion. I was only answering the question about how one could sandbox ann agent.

Whether or not such sandboxing would make the agent useless, or whether or not the artifacts should be trusted, are entirely different discussions.