Testing the tool calls an agent makes to a filesystem tool set (10 cases, no model needed)

Give an agent file tools and it gets real power over files. Most of the risk is not in the tools. It...