$ mcp-poison-scan poisoned.json poisoned.json:4:17: error [MP-EXFIL] exfiltration-secret-reveal in description field: matched '~/.ssh/' (pointer /tools/0/description ...