Built a security scanner for Model Context Protocol servers after finding RCE that code review missed.

Tests for command injection, path traversal, prompt injection. Semantic detection, 5-second scans, zero dependencies.

https://github.com/Teycir/Mcpwn

Feedback welcome.