Derive_2026_dxb_test_injection

What it usually takes

• model – in 1 of 1
• prompt – in 1 of 1

No server marks it as only reading: treat it as able to change data.

From each publisher's own tool list. We never call a tool.