'No tools listed' should mean deny, not allow-all
Here's a config bug that has shipped in more systems than anyone would like to admit: # grant this...
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.