Self-hosted password cracking queue — multi-user hashcat with audit log
The MCP server exposes a single tool 'scan' with minimal definition quality. The tool name lacks a clear action verb (should be 'scan_target' or 'crack_hash'). The input schema is present but extremely sparse: only a 'target' parameter with a generic string type and vague description ('Target path or hash to scan/crack'). No output schema is documented. The tool description is borrowed from the package metadata and does not explain what the tool actually does when invoked, when to use it, or what it returns. No parameter constraints, enums, or validation guidance. The implementation delegates to cognis_core.mcp.build_mcp_server(), which is not visible in the provided source, making it impossible to verify actual tool registration, error handling, or output structure. Per HARD SCORING RULES: tool lacks documented output schema (schema score capped at 0), description is generic and under 50 chars of actionable guidance (description score capped at 20).
Self-hosted password cracking queue — multi-user hashcat with audit log
No output schema documented. Tool returns unknown structure; LLM cannot plan downstream calls or extract results.
Input parameter 'target' lacks type constraints, format guidance, and validation rules. Description is vague ('Target path or hash'), does not clarify expected format, length, or valid values.
Tool name 'scan' is generic and does not start with a clear action verb. Ambiguous whether it scans files, hashes, or network targets. Should be 'scan_target', 'crack_hash', or 'queue_hash'.
Tool description does not explain what happens when called, what it returns, or when to use it. Borrowed from package metadata; not LLM-optimized for tool selection.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 24 | 2026-07-28+ | v2 |
Tool implementation hidden behind cognis_core.mcp.build_mcp_server(). Cannot verify error handling, output structure, pagination, or idempotency from source code.