Two tools with minimal documentation and no structured output schemas. Both tools have descriptions (French-language, 80-120 chars), but lack parameter descriptions, output schema documentation, and error handling guidance. No input validation, no pagination support, no error recovery patterns. Tool names are reasonably clear (search_*, ingest_*) but descriptions are generic. Hardcoded API credentials and bucket IDs in code violate secret injection pattern. No tool annotations (readOnlyHint/destructiveHint). Schemas are present but minimal (single string params, no constraints). This server falls well below production baseline.
Importez des documents depuis un fichier local dans la base de connaissances.
Recherche et extrait le contexte pertinent d'une base de connaissances, en fonction de la requête de l'utilisateur.
No output schema documentation. search_doc_for_rag_context returns a raw string with no structure; LLMs cannot parse or chain results. ingest_documents returns a free-text message. Both violate pattern:response-shaper.
Parameter descriptions missing. 'query' and 'local_file_path' have no descriptions in the tool schema visible to LLMs. LLMs cannot infer format, constraints, or expected values. Violates pattern:tool-description.
Hardcoded API credentials and bucket IDs (GROUNDX_API_KEY, id=17221, bucket_id=17279) in source code. Credentials must use server-side secret injection; bucket IDs should be configurable or passed as parameters. Violates pattern:secret-injection.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 37 | 2026-07-28+ | v2 |
No error handling or recovery guidance. If search fails or file ingestion fails, raw exceptions propagate. LLMs receive no actionable error messages. Violates pattern:recovery-guide.
No tool annotations. ingest_documents is destructive (WRITE risk) but lacks destructiveHint annotation. search_doc_for_rag_context is read-only but lacks readOnlyHint. Agents cannot distinguish safe from risky operations.