Your Agent Reads Tool Metadata You Never See MCP tool poisoning hides instructions in tool descriptions the model reads but humans never review. Why approving a tool name is not approvi... Framesta Fernando July 17, 2026