backend-reliability-engineer.md:1no `tools` declared → the agent inherits every tool, including Bash
Subagents without a `tools` list get unrestricted tool access.
Fix Declare a scoped `tools:` list with only what the agent needs (e.g. `tools: Read, Grep, Glob`).
Partial grade — some applicable rubric categories were not scored on this scan (e.g. LLM-assisted checks without a key) and are excluded from the overall.
Embed this badge
Always-fresh — it re-scans and updates on its own.