Automated web application penetration testing framework (OWASP Top 10 + MCP) - exposes YeepForge's web-app pentest tools over the Model Context Protocol so a host (Claude Code, Cursor, Claude Desktop, ...) drives the engagement with its OWN subscription.
YeepForge exposes only one tool: set_engagement. The tool has a complete JSON Schema with 9 properties (8 optional, 1 required), and a description of 227 characters explaining its purpose. However, the description lacks critical context about when to call it, what it returns, and how it interacts with downstream tools. The schema is well-structured with type strings and individual parameter descriptions (10-80 chars each), meeting baseline requirements. The tool name 'set_engagement' uses a verb but is vague, 'configure_engagement' or 'set_scan_target' would be clearer. No error handling guidance is documented. The tool is marked WRITE risk, but no confirmation or dry-run pattern is offered. Overall, the single tool meets minimum schema standards but falls short of production-grade documentation and composition patterns.
Set the engagement target and session context ONCE before running any scan tool. YeepForge injects the target URL (plus cookies/proxy/auth) into every later tool call, so you never pass the URL again. Only `target_url` is required; everything else is optional auth/scope context.
Tool name 'set_engagement' is vague. Does it configure scanning scope, inject auth, or both? Rename to 'configure_scan_target' or 'set_scan_context' for clarity.
Description lacks return value documentation. LLMs cannot plan downstream tool calls without knowing what set_engagement returns (success confirmation, session ID, etc.).
No error handling guidance. If target_url is invalid or unreachable, what should the LLM do? Retry? Ask user? Documentation must specify recovery paths.
WRITE risk tool lacks confirmation or dry-run pattern. Agents may misconfigure the engagement context, affecting all downstream scans. Offer a preview or confirmation step.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 53 | 2026-07-28+ | v2 |
Parameter descriptions contain example values ('sessionid=abc; csrftoken=xyz', 'Bearer eyJ...'). LLMs may reuse these literally instead of adapting to actual context. Use format constraints instead.