Elyxndra's coding-agent brain: OpenAI-compatible streaming client (thinking + tool calls), tools (files, grep/glob, edit, patch, terminal, todo, ask, delegate, memory, web), MCP, modes, approvals, context budget, compaction, sessions, checkpoints. Host-agnostic; Node 20+.
Elyxndra Agent has 17 tools with significant definition gaps. Most tools lack complete input schemas, many parameters are missing type definitions and descriptions. Tool descriptions are present but often generic (10-50 chars). Critical issues: apply_patch, todo, delegate, and memory have empty input schemas ({}), making them unusable by LLMs. No output schemas documented. Error handling is minimal. Tool naming is reasonable (verb-noun pattern), but parameter documentation is sparse. This server would not pass production code review.
Apply a patch to files
Ask the user a question
Delegate a task to a sub-agent
Delete a file
Edit a file's contents
Get the results of the user's most recent search in Elyxndra's model store: for each repo, its compatibility (MTP full speed / GGUF llama.cpp / AR-only / unsupported), which engine would run it, download size in GB, Hub downloads and likes, whether it's already installed, and for GGUF repos every quantization with size and a fit verdict for this machine. Call this when asked which model to download.
Get the user's machine hardware (chip, memory in GB, free disk in GB, GPUs), which local inference engines are installed (and what model formats each runs), and which models are already downloaded. Call this before recommending a model to download or run.
Four tools have empty input schemas ({}): apply_patch, todo, delegate, memory. LLMs cannot determine what parameters these tools accept, making them unusable.
Most file operation tools (edit_file, write_file, delete_file) lack complete parameter schemas. Missing descriptions for parameters like 'content', 'mode', 'force', etc. LLMs cannot infer what additional parameters these tools accept.
No output schemas documented for any tool. LLMs cannot plan downstream tool calls or extract required fields (e.g., file paths, IDs) from responses. This breaks tool composition.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 46 | 2026-07-28+ | v2 |
Find files matching a glob pattern
Search for text in files
List files in a directory
Read and write to agent memory
Read a file's contents
Run terminal commands
Manage todo items
Fetch content from a web URL
Research a topic on the web
Write contents to a file
Destructive tools (delete_file, terminal, write_file) lack confirmation/dry-run patterns and error recovery guidance. No indication of what happens on failure or how to undo operations.
Terminal tool accepts arbitrary shell commands with no input validation, sanitization, or injection guards. Agents can be tricked into executing malicious commands via prompt injection.