Skip to main content
Glama

websex_strings

Extract printable strings from binaries during authorized engagements by passing raw argv tokens directly; no shell parsing, scoped to the selected namespace.

Instructions

Run strings from the WebSex binary toolkit. The container executes strings directly with the supplied argv tokens; shell parsing is never used. Runs from the selected engagement namespace; use relative paths for engagement artifacts.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
stdinNo
argumentsYes
engagement_idYes
working_directoryNo.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It usefully discloses execution semantics: argv tokens are passed directly, shell parsing never happens, and it runs from the selected engagement namespace with relative paths for artifacts. These are meaningful behavioral facts, but it never states whether the operation is read-only or what happens on failure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the core action, then execution safety, then path context. No redundancy, though the namespace/path sentence slightly overlaps the working-directory concept.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. For a shell-free command wrapper with zero annotations, the description covers execution context and path conventions but omits failure behavior, permission requirements, and any statement of read-only safety.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate. It explains 'supplied argv tokens' (arguments), the selected engagement namespace (engagement_id), and relative paths for artifacts (working_directory), covering three of the four parameters. The stdin parameter is left entirely unexplained, so it only partially fills the gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Run strings from the WebSex binary toolkit') and names the underlying utility, so an agent knows this wraps the standard strings extractor. It does not explicitly differentiate from sibling binary tools like objdump or xxd, but the resource is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to reach for strings versus other binary-inspection siblings, nor any stated preconditions or exclusions. The only contextual hints are the engagement-namespace and relative-path notes, which describe mechanics rather than selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools