A defensive range for MCP and AI-agent attacks: reproduce a published insecure default, then ship the detection.
Scoring was not performed