An agent evaluation includes normal tasks but no attempts to misuse its tools. Which coverage should be added?

1. Only the agent icon's visual appearance
2. More duplicates of the same easy greeting
3. Only longer expected responses
4. Adversarial and authorization-boundary cases for the consequential tools