Three tools with complete input schemas and risk annotations, but critical gaps in parameter descriptions and output documentation. Tool names follow verb_noun convention (kb.search, repo.write_file, ops.restart_service). All have descriptions (10-60 chars), but descriptions lack actionable context about when to use each tool and what they return. Input schemas are well-formed with type constraints and length limits, but parameter descriptions are entirely absent, LLMs cannot infer what 'query', 'path', 'content', or 'service' mean beyond the name. No output schemas documented. Error handling and recovery guidance missing. Security annotations present (risk levels) but no scope declarations or permission gates visible in tool definitions.

• Add 50-150 character descriptions to each parameter explaining format, constraints, and purpose. E.g., 'query (string, 2-180 chars): Search term for the knowledge base. Use keywords like "deployment", "incident", or "runbook". Returns up to 20 matching articles.'
• Document output schemas for all three tools. Specify what fields are returned (e.g., kb.search returns [{id, title, snippet, url}]), whether results are paginated, and what IDs downstream tools need.
• Expand tool descriptions to 100-200 chars. Include: what the tool does, when to use it (vs alternatives), what it returns, and any prerequisites. E.g., 'Search the approved internal operations knowledge base for runbooks, incident procedures, and deployment guides. Returns up to 20 matching articles with snippets. Use this before calling ops.restart_service to check prerequisites.'
• Add a confirmation/dry-run step to ops.restart_service. Return a confirmation token that must be passed in a second call, or offer a 'dry_run' boolean parameter to preview impact before executing.
• Clarify repo.write_file sandbox semantics in the description and path parameter. Specify: are paths relative to a project root? Are there forbidden directories? What file types are allowed? This prevents LLMs from attempting path traversal or writing to system directories.