Audit all locally configured MCP servers for permission risks, prompt injection threats, and schema drift