Poison everywhere: No output from your MCP server is safe