When an AI agent trusts a tool server the way an app trusts a package, the supply chain attack surface moves with it. This is not a new problem wearing new clothes.