A pentest tool wrapping 200 plus CLI tools and 60 curated probes is exactly the kind of thing where the boring knobs matter. The repo is unusually explicit about Juice Shop being a friendly benchmark, OAST metadata leakage, and production flags that default off, which is the little blinking light I wanted to click for.