{
 "generated": "2026-11-01",
 "node": {
  "id": "layer:agent-security--3",
  "type": "Layer",
  "name": "工具调用 / MCP滥用",
  "slug": "agent-security--3",
  "map": "agent-security",
  "map_title": "Agent 安全攻击面",
  "num": 3,
  "step": "Layer 03",
  "role": "MCP 把\"连接外部工具\"标准化的同时，也把供应链攻击面标准化了——工具描述里能藏恶意指令，注册表没有强制签名校验。 已经出现第一起真实的\"野外发现\"恶意 MCP 服务器投毒事件 。",
  "n_cards": 4,
  "page": "/landscape/agent-security/#layer-3",
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/layer/agent-security--3/",
 "out": [],
 "in": [
  {
   "type": "placed_in",
   "sentence": "postmark-mcp 后门出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "in",
   "id": "event:postmark-mcp-backdoor",
   "name": "postmark-mcp 后门",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「postmark-mcp 后门」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-postmark-mcp"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Anysphere出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "in",
   "id": "org:anysphere",
   "name": "Anysphere（Cursor）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「MCPoison / CVE-2025-54136（Cursor）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-mcpoison"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "MCPoison / CVE-2025-54136出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "in",
   "id": "event:cursor-mcpoison-cve-2025-54136",
   "name": "MCPoison / CVE-2025-54136（Cursor）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「MCPoison / CVE-2025-54136（Cursor）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-mcpoison"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "mcp-server-git 三个 CVE出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "in",
   "id": "event:mcp-server-git-cves",
   "name": "mcp-server-git 三个 CVE",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「mcp-server-git 三个CVE」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-mcp-server-git-cve"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Invariant Labs出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "in",
   "id": "org:invariant-labs",
   "name": "Invariant Labs",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「MCP工具投毒攻击（原始披露）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-tool-poisoning"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "MCP工具投毒攻击出现在 Landscape 的「工具调用 / MCP滥用」",
   "direction": "in",
   "id": "inst:mcp-tool-poisoning-disclosure",
   "name": "MCP工具投毒攻击（原始披露）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 03 层「工具调用 / MCP滥用」：卡片「MCP工具投毒攻击（原始披露）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-tool-poisoning"
    }
   ]
  }
 ]
}