Skip to content
T threat.cafe

Tag

#enforcement

1 post

  1. · Tobias Lindqvist-Rao · Original research and datasets · on threat.cafe

    Do coding agents call optional security tools on their own? What the docs guarantee, and a 50-task test to run

    Nothing in the MCP spec or Claude Code's docs makes an agent call a security-check tool before it installs something. The model decides. Here is why, and a pre-registered 50-task protocol to measure it on your own setup.