heron

Each tool has a clearly distinct purpose, from identity lookup and posture scoring to specific scans for skills, MCP servers, and user input. No two tools appear to overlap in function, and descriptions are detailed enough to avoid confusion.

All tools use the 'heron_' prefix and underscores, with a mix of noun phrases (e.g., heron_agent_identity) and verb imperatives (e.g., heron_inspect). The pattern is mostly consistent, though the mix of noun and verb forms is a minor deviation.

With 13 tools, the set is well-scoped for a security analysis service. Each tool covers a specific aspect of agent and server safety, leaving no apparent bloat or scarcity.

The tools cover core security workflows: identity, posture, red-teaming, input inspection, and verification. The inclusion of heron_score (URL citability) is slightly tangential but not a major gap. Minor missing features like batch scanning or historical comparisons prevent a perfect score.