Diagnosing Planning Quality in LLM-Based Penetration Testing Using Execution-Free Evaluation. JSAA-International Journal 2026, 3 (1), 51-70. https://doi.org/10.66279/enzxq198.