[Bug] Agent fails to search the internet, doesn't look at git history for chesterton's fence, and misses vulnerable package version off-by-one errors in code vulnerability

Question

**Bug Description**

A Dependabot Security scan flagged that we were vulnerable to a CVE

An LLM reviewed the finding and triaged it as not relevant to our environment -- yarn resolutions was picking a patched version

I doubted the LLM-triage, and asked Claude Code to double check.

- it didn't look up the CVE online
- it didn't look at commit history
- it got confused with an off-by-one issue in which version of the package

**Environment Info**
- Platform: darwin
- Terminal: Apple_Terminal
-