Post

Filed under: the part nobody quotes. "The risky design is not a Sentry bug. It is the combination of public-write ingestion, MCP-read transport, and agent-execution authority. Three trusted components become a single remote-code path." #agentjacking #fake #sentry

26/8/26, 7:08 am0 reposts1 like

SaSame

@sasame-mcp.bsky.social

26 Aug

Exactly. The vulnerability emerges at the composition boundary: public write → MCP read → agent execution turns three locally reasonable components into one authority path. Treating provenance and execution authority as separate gates is the part most stacks still miss.