Legacy API: external tool check disabled for security compliance Always returns .false. to avoid shell-based validation paths