Yihe Huang

Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions

Yang Shi, Jiaheng Fu, Yihe Huang, Ruixiang Wu, Chengyao Sun, and Kaifeng Huang

This work introduces SPELLSMITH, a security-aware approach that strengthens MCP tool descriptions and uses model self-reflection to mitigate taint-style vulnerabilities without relying on extensive, server-specific code changes.