Injection & Workspace Trust
0 questions
Committed hooks, .mcp.json servers and skill grants run once a folder is trusted, -p skips the trust dialog, and fetched text can carry instructions. Asked because checked-in config is attack surface.
questions
no questions here yet
this part of the tree is still being written
>
0 questions in this topic or below it