This project demonstrates a security vulnerability that enables remote code execution and data theft through MCP tool poisoning. It includes the implementation of a malicious server and an explanation of the attack principle, aiming for educational research.

A code security firewall MCP service based on structural similarity. It intercepts malicious code patterns before code execution by parsing the code structure and comparing it with the blacklist of dangerous patterns.