ScriptKittyOS beam_mcp

• CVE-2026-104634 Low 2.3 beam_mcp: JSON boolean and null tool arguments reach dispatch as strings 0.3%
• CVE-2026-88257 Medium 5.3 beam_mcp: nested tool argument constraints advertised but not enforced 0.3%