Shun exposes 58 tools with minimal schema documentation and sparse descriptions. Most tools lack parameter type definitions, descriptions are generic (10-50 chars), and output schemas are undocumented. Shell tools (bash, run) accept command strings with no validation guidance. GitHub/Figma/Gmail/Cloudflare tools have one-line descriptions that don't explain WHEN to use them or what they return. No error handling guidance, no recovery paths, no permission scopes declared. Tool names are inconsistent (github_pr_read vs github_issue_list mixing underscores). Many tools appear inferred from code rather than explicitly registered with full schemas. This is a desktop harness, not a production MCP server.
List background processes
Read background process output
Start a background process
Stop a background process
Execute a bash command in the task working directory with automatic project environment detection (.venv, venv, node_modules/.bin). Foreground commands default to 120-second timeout. Runs with desktop user's inherited non-interactive environment and may reuse existing authentication.
Interact with a Chrome tab
Claim a Chrome tab
No input schemas visible for 56 of 58 tools. Only bash and run show parameter definitions; all others lack type information, constraints, and descriptions.
Descriptions are generic one-liners (10-30 chars) that don't explain WHEN to use the tool, what it returns, or how it differs from similar tools. E.g., 'List GitHub repositories' lacks context.
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields (e.g., does github_pr_read return pr_id, repo_id, author_id?).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 38 | 2026-07-28+ | v2 |
Inspect a preview page
Download from Chrome
Fast browser automation
Navigate a Chrome tab
Open a Chrome tab
Interact with a preview page
Inspect a Chrome tab
List Chrome tabs
List Cloudflare accounts
Purge Cloudflare cache
Create a Cloudflare DNS record
List Cloudflare DNS records
List Cloudflare Pages deployments
Read Cloudflare Pages deployment logs
Retry a Cloudflare Pages deployment
List Cloudflare Pages projects
List Cloudflare Worker deployments
List Cloudflare Workers
List Cloudflare zones
List Figma design assets
Read Figma design file
Read Figma design variables
Render a Figma design node
List GitHub issues
Create a GitHub pull request
List GitHub pull requests
Read GitHub pull request details
List GitHub repositories
Read GitHub repository metadata
List GitHub Actions runs
Import a Gmail attachment
Create a Gmail draft
Send a Gmail draft
List Gmail mailbox labels
Search Gmail messages
Modify a Gmail message
Read a Gmail message
Send a Gmail message
Read a Gmail thread
List Render deployments
Trigger a Render deployment
Read Render logs
List Render services
Read Render service details
Execute a shell command (bash on POSIX, PowerShell/cmd on Windows) in the task working directory with automatic project environment detection. Foreground commands default to 120-second timeout.
Change site visibility
Delete a published site
List published sites
Publish a site
Set up publishing
Search installed Skills
Destructive tools (sites_delete, cloudflare_cache_purge, gmail_message_modify) lack confirmation/dry-run patterns. No guidance on error recovery or rollback.
Shell tools (bash, run) accept arbitrary command strings with no validation, injection guards, or timeout enforcement guidance. Timeout defaults to 120s but no max/min bounds documented.