mcp sdk doesn't validate tool names for injection

tested mcp sdk 0.5.0 yesterday and you can register tools with names like `../../../etc/passwd` or `rm -rf /`. sdk accepts them at registration time with zero validation. if the agent framework uses tool names in logs or file paths you can trivially inject path traversal or command injection payloads