A safety runtime for shell commands and MCP tools that classifies commands, enforces policies, and manages approvals
Single tool 'run_command' has a basic schema with two parameters (command, cwd) but critical gaps undermine quality. Description is minimal (11 words, ~60 chars), below the 10 - 1024 char guideline and lacks context on when/why to use it. No parameter descriptions visible in the schema, LLMs cannot infer what 'cwd' means or how it interacts with 'command'. No output schema documented. No error handling guidance. The tool executes arbitrary shell commands (WRITE risk) with no mention of safety constraints, validation, or recovery paths. Schema is present but incomplete; descriptions are missing or trivial.
Execute a shell command through fuse safety runtime
Tool description is too short (60 chars) and lacks context. Does not explain WHEN to use it, WHAT it returns, or safety constraints. LLMs cannot determine if this is the right tool for a task.
Parameter 'cwd' has no description. LLMs cannot infer whether it is a relative path, absolute path, or optional working directory context. Undescribed parameters force guessing.
No output schema documented. LLMs do not know what fields to expect (exit code, stdout, stderr, combined output?). Undocumented output prevents downstream tool chaining and forces parsing guesses.
No error handling guidance. Tool executes arbitrary shell commands (WRITE risk) but provides no recovery hints, validation rules, or safety constraints. Agents cannot self-correct on failure.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 39 | 2026-07-28+ | v2 |
Tool name 'run_command' is generic and vague. Does not convey scope (shell, system, local?), safety level, or intended use. Ambiguous names cause LLMs to misselect tools.