Batch-oriented MCP server for headless binary analysis using the Kuna decompiler and LIEF.
Four tools with complete input schemas and descriptions, but descriptions are minimal (10-60 chars, well below the 194-char baseline). All tools are READ_ONLY and lack error handling guidance. No output schemas documented. Parameter descriptions are present but terse. Tool names follow verb_noun pattern (miasm_*) but lack clarity on when to use each variant. No tool annotations (readOnlyHint, etc.) despite all being read-only. Missing guidance on prerequisites, expected return structures, and failure modes.
Disassemble bytes at a virtual address using miasm's engine.
Emulate a code snippet using miasm's symbolic execution engine.
Lift bytes at a virtual address to miasm intermediate representation.
Simplify a miasm expression string.
Tool descriptions are 10-60 characters, far below the 194-char baseline. LLMs cannot determine when to select miasm_disassemble vs miasm_lift_ir vs miasm_emulate_snippet without explicit guidance on use cases and differences.
No output schemas documented. LLMs cannot plan downstream operations or extract structured data from results. What fields does miasm_disassemble return? Is it a list of instructions, a string, or an object?
No error handling guidance. Tools accept file paths and addresses but provide no recovery hints if the PE file is invalid, address is out of bounds, or architecture detection fails. LLMs have no actionable next steps on failure.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 50 | 2026-07-28+ | v2 |
Tool annotations missing. All four tools are READ_ONLY but lack readOnlyHint annotation. This forces LLMs to infer safety from descriptions alone, increasing hallucination risk for destructive operations elsewhere.
Parameter descriptions lack format/constraint details. 'address' is an integer but no range or alignment requirement stated. 'arch' defaults to empty string but no guidance on valid values (x86, x86_64, ARM, etc.) or auto-detection behavior.