What it may solve
Taints the agent when tool results carry untrusted content, gates the privileged calls that follow, and refuses credentials passed to network-capable tools in every mode.
Imported third-party catalog description; not a Registry verification conclusion.