A secure, provider-agnostic Python runtime for AI agent tool execution with policies, budgets, approvals, and audit trails.
This is a Python agent runtime library, not an MCP server. The 7 tools are defined in example files (01_quickstart.py, 02_agent_loop.py, 03_permissions.py, 04_sandbox.py) and appear to be demonstration code rather than production tool definitions. Tool schemas are present with basic type info (integer, string, array), but descriptions are minimal (10-50 chars, well below the 50-200 char baseline for LLM-optimized descriptions). No evidence of output schemas, error recovery guidance, or parameter constraints (enums, ranges). The 'add' tool appears twice (duplicate). The 'shell' tool accepts arbitrary commands with minimal safety guardrails visible in the schema alone. Overall, definitions lack the depth needed for reliable agent reasoning.
Add two integers.
Add two integers.
Delete a user account (irreversible).
Read a configuration value.
Look up a word in a tiny dictionary.
Multiply two integers.
Run a short shell command in the subprocess sandbox.
Descriptions are too short (10-50 chars vs. 50-200 char baseline). 'Add two integers' and 'Look up a word in a tiny dictionary' lack context for LLM tool selection. No guidance on when to use each tool or what it returns.
No output schemas documented. LLMs cannot infer what fields to expect from tool results, forcing them to guess at downstream tool chaining and data extraction.
Destructive tools (delete_account, shell) lack confirmation/dry-run patterns. No evidence of approval gates, audit trails, or recovery guidance in schema.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 41 | 2026-07-28+ | v2 |
Tool 'add' is defined twice (examples/01_quickstart.py appears twice in tool list). Duplicate tool names create ambiguity for LLM dispatch.
Parameter descriptions are missing or trivial. 'word to look up' and 'command and arguments as list of strings' lack format constraints, examples of valid input, or error recovery hints.