The file tools repeated the pattern. read_file, write_file, edit_file: checked the path. grep and list_files: no check at all. list_files("..") listed the parent directory. grep read any absolute path. The read-only tools were the unchecked ones.