No-Box Vulnerability Analysis: Description-only Detection of Indirect Prompt Injection Vulnerabilities in MCP Servers

A method to detect indirect prompt injection vulnerabilities in MCP servers using only tool descriptions, improving security assessment without executing code.

Auto-scored: The paper introduces a detection technique for prompt injection vulnerabilities, a minor risk but a partial mitigation step for securing AI agent tooling.