You are building developer productivity tools using the Claude Agent SDK. The agent helps engineers explore unfamiliar codebases, understand legacy systems, generate boilerplate code, and automate repetitive tasks. It uses the built-in tools (Read, Write, Bash, Grep, Glob) and integrates with Model Context Protocol (MCP) servers.

You're building a security scanning workflow.

When engineers need to locate all occurrences of a dangerous function like eval() across a large codebase, which tool should your agent use for content search?