Risk Scoring Algorithm

- **critical** — Direct security threat (exfiltration, prompt injection, credential access) - **high** — Concerning capability (shell exec, network calls, file access outside scope) - **medium** — Warrants review (URLs, base64 strings, binary files) - **low** — Minor or informational