论文记录-Model Context Protocol Under Attack: Threat Surface Analysis, Taxonomy, and Security Benchmarking