Reviews changes against this repo's threat model — indirect prompt injection via FreeAgent data, SSRF / bearer-token exfiltration, path traversal through IDs, and OAuth/token handling. Use when reviewing diffs that touch client.py, auth.py, src/tools/, input validation, or any request-path construction.
Call the real FreeAgent API during development to design tool shapes against actual data, capture test fixtures, and resolve undocumented API behaviour. Use whenever implementing or changing a tool module in src/tools/, whenever a field name or response shape is uncertain, or whenever the tool inventory marks…