AEGIS — AI Agent Permission & Access Auditor. Static auditor for MCP, LangChain, LlamaIndex, OpenAI Assistants, CrewAI, and AutoGen agents.
Single tool 'aegis_scan' has a well-structured JSON Schema with proper types and required fields. Description is comprehensive (280+ chars) and explains the tool's purpose, supported frameworks, and output types. However, parameter descriptions are minimal: 'target' lacks guidance on path format/validation, and 'format' enum is present but lacks explanation of when to use each. No output schema documented, LLMs cannot predict response structure. Error handling is basic (returns text errors, no recovery guidance). Tool does one thing well (audit), but lacks production-grade parameter validation and output documentation.
AEGIS — AI Agent Permission & Access Auditor. Statically audits agent projects (MCP, LangChain, LlamaIndex, OpenAI Assistants, CrewAI, AutoGen) and returns a permission matrix, lethal-trifecta detection, and risk-scored findings mapped to OWASP LLM Top 10 + MITRE ATLAS. Part of the Cognis Neural Suite.
No output schema documented. LLMs cannot predict response structure (JSON vs markdown text, field names, nesting). Agents cannot reliably extract data for downstream use.
Parameter 'target' lacks validation guidance. No description of accepted path formats (absolute vs relative), symlink handling, or size limits. LLMs may pass invalid paths.
Error handling returns plain text ('Error: target is required', 'Unknown tool: {name}') with no recovery guidance. LLMs cannot determine if errors are retryable or user-fixable.
Format parameter enum lacks descriptions. LLMs don't know when to choose 'json' vs 'markdown', no guidance on downstream tool compatibility or use cases.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 60 | 2026-07-28+ | v2 |
Tool name 'aegis_scan' is generic. Verb 'scan' is clear, but 'aegis' is a brand name, not an action. Consider 'audit_agent_permissions' or 'scan_agent_security' for clarity.