Hello HN! I am a security researcher at Semgrep and I took a particular interest in diving into the model context protocol this summer. We have just posted a (vendor agnostic) auditing blog (and cheatsheet!) for quickly triaging "how risky" a MCP tool is.