Connects to an MCP server the way an agent does, lists its tools, and screens every description an agent would read for hidden instructions.