While it’s possible to demonstrate the safety of an AI for
a specific test suite or a known threat, it’s impossible
for AI creators to definitively say their AI will never act
maliciously or dangerously for any prompt it could be given.
This possibility is compounded exponentially when MCP[0] is used.
0 - https://github.com/modelcontextprotocol