Single tool 'webrecon_scan' has a basic description (58 chars) but critically lacks parameter descriptions and output schema documentation. Input schema exists but is minimal: only 'target' string with no format constraints, range limits, or usage guidance. No error handling guidance, no examples of expected output structure, and no documentation of what 'findings' contains. The tool description states 'Returns JSON findings' but does not document the JSON structure, field names, or types. This forces LLMs to guess at output shape and invites misuse.
Fingerprint web tech/CMS/frameworks from headers + body. Returns JSON findings.
Parameter 'target' lacks description. LLM cannot infer whether it expects a URL, file path, domain, or IP. No format constraints (regex, length, allowed characters) provided.
Output schema not documented. Description says 'Returns JSON findings' but does not specify field names, types, or structure. LLM cannot plan downstream processing or extract specific data.
No error handling guidance. Tool description does not explain what happens if target is invalid, unreachable, or malformed. No recovery hints for LLM.
Tool name 'webrecon_scan' is acceptable but generic. Does not clearly distinguish this from other scanning tools (e.g., 'scan_web_fingerprint' or 'fingerprint_web_technologies' would be more specific).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 44 | 2026-07-28+ | v2 |
No pagination or result limiting documented. If 'findings' is a large array, no guidance on max results, pagination, or truncation behavior.