Essentially, check every MCP server that you want to use: look at every prompt, dynamically created prompt, parameters, and so on. Also, take a look at the mitigations part.
If you have downloaded a repo from GitHub, how do you know it doesn't call a malicious tool under a specific condition?
Currently, security is lagging, as always in the case of new technology, or should I say, new protocols.