Three tools are defined but lack critical quality markers. Tool names are descriptive (read_sdk_documentation_topic, execute_script, render_spread) but descriptions are minimal (10-30 chars, well below the 50-200 char baseline for A+ tools). Input schemas are present for two tools but lack parameter descriptions entirely. The third tool (render_spread) has no visible schema in the provided source. No output schemas are documented. Error handling is absent, no guidance on what happens on failure or how to recover. Tool composition is weak: execute_script accepts arbitrary JavaScript, creating injection risks without validation or sanitization guidance.

• Add 50-200 character descriptions to each tool explaining WHAT it does, WHEN to use it (vs similar tools), and what it returns. Example: 'read_sdk_documentation_topic: Retrieve Affinity SDK documentation by topic name. Use this to learn API capabilities before writing scripts. Returns markdown-formatted documentation with code examples and API signatures.'
• Add descriptions to all parameters. For 'filename', specify format (e.g., 'Topic filename without extension, e.g. "preamble", "api-reference"'). For 'script', document constraints: 'JavaScript code executed in Affinity's scripting sandbox. Must not contain network calls or file I/O. Timeout: 30s.'
• Document output schemas for each tool. Example for read_sdk_documentation_topic: '{"type": "object", "properties": {"content": {"type": "string", "description": "Markdown-formatted documentation"}, "topic": {"type": "string"}, "last_updated": {"type": "string", "format": "date-time"}}}'
• Add error handling guidance. For execute_script: 'On script error, returns {"error": "<error message>", "line": <line number>}. Common errors: ReferenceError (undefined variable), SyntaxError (invalid JS), TimeoutError (script exceeded 30s). Retry with corrected script or call read_sdk_documentation_topic to verify API.'
• Implement input validation and sanitization for execute_script. Document security constraints: 'Scripts are sandboxed and cannot access file system, network, or process APIs. Attempting to do so raises a SecurityError. All user input must be escaped before interpolation into script strings.'