Aggregate email OSINT (breach hints, MX, SPF/DMARC posture)
Single tool 'emailrecon_scan' has a basic description (67 chars) but critically lacks parameter descriptions. The input schema defines 'target' as a string with no description explaining what format is expected (email address, domain, file path?). No output schema is documented, the tool returns JSON but the structure is not formally specified. The description is adequate but parameter documentation is absent, violating the requirement that every parameter needs a description. No error handling guidance is provided.
Aggregate email OSINT (breach hints, MX, SPF/DMARC posture). Returns JSON findings.
Parameter 'target' lacks description. LLM cannot infer whether to pass an email address, domain, file path, or something else.
No output schema documented. Tool returns JSON findings but structure (fields, types, nesting) is not formally specified. LLM cannot plan downstream operations.
No error handling guidance. Tool provides no recovery hints if the target is invalid, unreachable, or malformed.
Tool name 'emailrecon_scan' is acceptable but generic. Does not clearly distinguish from other reconnaissance tools or indicate what 'scan' returns (findings, scores, posture report?).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 47 | 2026-07-28+ | v2 |