Specialized agent guards block up to nine in ten safe actions when tool calls arrive as shell commands, ToolRosetta finds · Polylog