Code execution via file_name path traversal

Path traversal in PythonTools in Agno through 710d7e7 allows attackers to read, write, or execute files via crafted file_name input. The read_file, save_to_file, and run_python_file actions join untrusted file_name values to base_dir and, before the referenced patch commit 710d7e7, did not verify that the resolved path stayed under that directory. Exposure requires attacker control of a tool invocation or prompt-influenced agent input, and impact is bounded by the Agno process user's filesystem permissions and ability to run Python from attacker-chosen paths.