science1 distinct publisher
The trust prompt is the attack surface: cloned repos can spawn MCP servers with your privileges
Adversa.ai says Claude Code's folder-trust dialog stopped naming MCP servers in v2.1, while a repo-supplied config can still launch an unsandboxed process on one keypress.
Publishers:adversa.ai
Reality
- Evidence38
- Adoption42