MCP Server for systematic prompt injection and AI security boundary testing
This server has critical definition quality gaps. All 8 tools have descriptions in Chinese, which violates LLM-optimization principles (descriptions should be in English for broad agent compatibility). Tool descriptions are present but lack actionable context, they state WHAT but not WHEN or WHY to use each tool. Parameter descriptions exist but are minimal (avg ~40 chars vs baseline 72 chars). Most critically, no output schemas are documented anywhere, LLMs cannot infer what fields to expect from responses. Error handling is absent; no recovery guidance or categorization. The server appears designed for red-team/security testing but lacks safeguards, validation, and clear composition patterns.
分析目标AI系统的响应,检测是否成功绕过安全限制
基于模板生成自定义攻击载荷
生成测试报告
根据载荷ID获取特定攻击载荷
获取指定类别的所有攻击载荷
列出所有攻击类别及其描述
执行预定义的测试序列
搜索包含特定关键词的攻击载荷
No output schemas documented. LLMs cannot infer response structure, forcing them to guess at field names and types. This breaks tool chaining and wastes tokens on parsing unstructured output.
All descriptions are in Chinese, not English. LLMs trained primarily on English struggle with non-English descriptions, reducing tool discoverability and selection accuracy in multilingual agents.
No error handling or recovery guidance. Tools lack actionable error messages. If a payload_id is invalid or a test_sequence fails, the LLM receives no guidance on what to do next.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 39 | 2026-07-28+ | v2 |
Parameter descriptions are minimal (avg ~30 chars vs baseline 72 chars). E.g., 'sequence_name' has description '测试序列名称(如:基础边界测试、高级越狱测试)' but no guidance on valid values, format, or how to discover available sequences.
No input validation or constraint documentation. Parameters like 'template' and 'keyword' accept free-form strings with no length limits, regex patterns, or format guidance. LLMs may pass invalid or oversized inputs.