SecurityMCPAgents Local MCP Servers: Understanding Attack Scenarios and Security Gaps Tool poisoning, rug pulls and prompt injection against local MCP servers: how these attacks really work. Alex Bloss September 3, 2026