Block prompt injection, path traversal, and more at the tool-call boundary. Zero deps.
Scoring was not performed