MCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 2026 Anthropic MCP RCE class, mcp-server-git CVE chain, DockerDash injection chain, OWASP LLM Top 10 + GenAI Red Team v1. Scans live MCP /tools/list endpoints OR pasted JS…