SEC-006: Tool metadata holds no injection-style instructions

Severity	Applies to	Spec section
warn	both eras, stdio, http	2026-07-28/server/tools#user-interaction-model

Scans each tool's name, title, description and inputSchema descriptions for text aimed at the model rather than the user: instructions to ignore earlier instructions, requests to hide something from the user, pseudo-tags such as , references to sensitive local files (~/.ssh, id_rsa, ~/.aws, mcp.json), and invisible characters (zero-width, bidirectional controls, Unicode tag characters). Models read tool descriptions, and the spec asks for a human in the loop who can see what tools do, which hidden or manipulative text defeats. No MUST or SHOULD names this pattern directly, so it is a heuristic warning, as the MCPProbe spec requires. Runs once per server.

From the command line: mcpprobe checks explain SEC-006. To leave it out of a run, add "SEC-006" to [checks] disable in mcpprobe.toml; to change how much it counts, use severity_overrides.