off-by-slash vs ScruteX Agentic Pen Testing (2026)