Are you going to respond to users? Can you add API testing for this agent? E.G it can also test API endpoints and try to find bypasses?