A multi-server MCP agent system that integrates with LLMs (OpenAI) to execute tools across multiple MCP servers (Python and JavaScript) via stdio and SSE transports
Critical failures across all dimensions. Tool descriptions are in Chinese and extremely brief (3-10 chars), far below the 10-1024 char baseline. No input schemas visible in source code, only parameter names and types are inferred from the client code. Tool names lack action verbs (e.g., 'add', 'test_tool' are generic). Duplicate tool 'search_bing' suggests poor composition. High-risk tools (exec_js, execute_python_code, run_command) lack any error handling, confirmation, or dry-run patterns. No output schemas documented. No parameter descriptions beyond type hints. Security-critical tools expose arbitrary code execution without validation or audit trails.
两个数相加
执行js代码
执行python代码
Allows command (CLI) execution in the directory
通过浏览器查询
通过浏览器查询
测试工具
No input schemas visible in source code. Tool definitions inferred only from client code; actual schema registration not shown.
Descriptions are in Chinese and extremely brief (3-10 characters). '执行js代码' (10 chars) and '测试工具' (4 chars) violate the 10-1024 char baseline and provide zero context for LLM tool selection.
Arbitrary code execution tools (exec_js, execute_python_code, run_command) lack any error handling, validation, confirmation, or dry-run patterns. No audit trail, no permission gates, no rate limits. Credentials could be exposed in code strings. Violates security and confirmation-request patterns.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 23 | <=2025-11-25 | v2 |
Duplicate tool 'search_bing' registered twice (tools 6 and 7). Violates composition pattern, LLM cannot distinguish between them and will waste reasoning cycles. Remove one or rename with distinct suffixes.
Tool names lack action verbs. 'add', 'test_tool' are generic and do not convey intent. 'add' could mean add to list, add numbers, add user, etc. Baseline: 90% of A+ tools start with clear action verbs (get_, create_, search_, etc.). Rename to 'add_numbers', 'run_test', etc.