Proves whether AI agent (MCP) tool configurations are actually exploitable — not just risky-looking.
Scoring was not performed