just want to add that this line from the article "Before passing data to the assistant, scan them for suspicious patterns like imperative verbs, SQL-like fragments, or common injection triggers. This can be implemented as a lightweight wrapper around MCP that intercepts data and flags or strips risky input." is exactly what we're building at maybedont.ai .... it's free and downloadable today. if you're running in to these things, give it a try and get in touch with us (founder here), we'd lvoe all the input.