Step-level tool invocation safety detection