Can prompt injection attack an MCP tool? · PitHub