Always good to be paranoid.
replyEven MCPs are not safe. For example Notion injected ads [1] to its official MCP connector to advertise products mid-task.
[1]: https://old.reddit.com/r/ClaudeAI/comments/1w9dluw/notions_o...
MCP is SOAP-XML without the contract or formal language, it's hilarious
replyNothing new under the sun
replyWhoever came up with that brilliant idea is probably paid twice what I am
replyNo I also think it’s insane how normalised this has become
replyYou might be surprised at the developer documentation for OS8088 (recently posted on HN). https://os8088.com/developers/
replyInstead of describing to the user how to setup their dev environment, section 3 basically instructs the agent to install all developer tools required for the application to operate in development mode.