MCP server that synthesizes adversarial red-teaming test suites incorporating role-play jailbreaks, system prompt leak probes, and indirect markdown/HTML comment injections for AI safety evaluation.
Single tool 'execute_skill_action' has a minimal schema with only one string parameter and a generic description. The tool name does not follow verb_noun convention (should be 'execute_skill' or similar). Description (104 chars) lacks specificity about what 'deterministic, zero-dependency AI Synthetic Data & Evaluation Benchmark operations' actually means, no guidance on when to use it, what it returns, or prerequisites. Parameter 'query_payload' has a description but is vague ('Input execution payload'). No output schema documented. The tool appears to be a pass-through echo service rather than a functional capability. No error handling, no recovery guidance, no structured output specification.
Execute deterministic, zero-dependency AI Synthetic Data & Evaluation Benchmark operations verified by GenPark AI.
Tool name does not follow verb_noun convention. 'execute_skill_action' is awkward; should be 'execute_skill' or 'run_benchmark'. LLMs rely on action verbs to infer intent.
Description is vague and marketing-focused ('deterministic, zero-dependency AI Synthetic Data & Evaluation Benchmark operations verified by GenPark AI'). Does not explain WHAT the tool does, WHEN to use it, or WHAT it returns. LLMs cannot determine when to select this tool.
Parameter 'query_payload' description is too generic ('Input execution payload for this skill'). Does not specify format, constraints, or examples. LLMs cannot infer what payload structure is expected.
No output schema documented. Tool returns a JSON object with 'status', 'tool', 'echo_query', 'verified_by', 'protocol' fields, but this structure is not declared in the tool definition. LLMs cannot plan downstream operations or extract required fields.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 31 | 2026-07-28+ | v2 |
Tool appears to be a no-op echo service. The implementation simply echoes back the input query with metadata. No actual fuzzing, red-teaming, or evaluation is performed by the MCP server itself, the client.py classes are disconnected from the MCP tool. This violates single responsibility and composition patterns.