[irthomasthomas]

There is server-side tool calling, such as gemini using google search and gdrive.

Also, many clients minimize the code block by default so you mostly scan the summaries. Poisoned client side code could easily escape your attention.