Agrus Scanner demonstrates solid foundational quality with all 4 tools properly named with action verbs (scan_, probe_, export_, list_), complete input schemas with types and descriptions, and clear docstrings. Tool names follow verb_noun convention (scan_network, probe_host, export_results, list_presets) which aids LLM comprehension. All parameters include type definitions and descriptions. However, several gaps prevent a higher score: output schemas are not formally documented (only implied via code comments), error handling lacks recovery guidance (e.g., invalid IP formats, permission denied for file exports), no parameter validation feedback, and missing context about when to use scan_network vs probe_host. The export_results tool includes thoughtful path traversal protection and CSV injection prevention, showing security awareness. Tool descriptions are adequate (40-120 chars, within baseline 34-392), but could better explain prerequisites and dependencies between tools.

• Document explicit output schemas for all tools. Example: 'scan_network returns array of objects: [{ip: string, hostname: string, alive: boolean, ping_ms: number, open_ports: [{port: int, service: string}], ai_services: [{service: string, category: string, port: int, confidence: float}]}]'
• Add actionable error messages with examples. Replace generic exceptions with: 'Invalid IP range. Use CIDR (192.168.1.0/24) or range (10.0.0.1-254) format.' Include actual value received.
• Document scan result limits and pagination strategy. Add limit parameter to scan_network (e.g., default=50, max=100) and document that results are ordered by IP.
• Clarify tool dependencies in descriptions. Add: 'Call list_presets first to see available scan strategies. Use scan_network for network-wide discovery; use probe_host for deep analysis of a single IP.'
• Add timeout and retry guidance to descriptions. Example: 'Scans timeout after 30 seconds per host. If timeout occurs, try with skip_ping=true or reduce IP range.'
• Specify port parameter validation rules for probe_host. Add: 'Comma-separated ports must be integers 1-65535, max 50 ports. Presets: quick (top 22), common (top 100), extended (top 1000), ai (ML service ports).'
• Document export_results file path rules. Add: 'file_path restricted to user Documents folder for security. Bare names (scan-results.json) are allowed; absolute paths must start with Documents directory.'
• Add per-item error reporting for future batch operations. If scan_network is extended to batch multiple ranges, return {ip_range, status, results, error} per item instead of all-or-nothing.