core: extract external directory validation to shared utility to reduce code duplication across tools