however it can't get infected because there is no internet access.
the worst you can do is put your secrets in the web search box
MCP is just a wrapper on top, there are no inherent differences other than complexity on top.
How do you think MCP work under the hood?
i would still have to make a proxy for the cli tool because i don't want the agent having secrets in its container
however it can't get infected because there is no internet access.
the worst you can do is put your secrets in the web search box