Skip to main content
Glama
@guardbee/mcp-security-proxy

@guardbee/mcp-security-proxy

Official

agent_graph_auditor__scan_directory

Recursively scan directories of Python files to detect excessive-agency paths in each file's agent/tool graph, reporting findings per file without resolving cross-file references.

Instructions

Recursively scan a directory of Python files and report excessive-agency paths found in each. Each file's agent/tool graph is analyzed independently — variable references don't resolve across files, so a Crew/GroupChat whose members are defined in a different file than the assembling call won't be connected.

Input Schema

NameRequiredDescriptionDefault
pathYesAbsolute or relative path to the directory to scan
excludeNoSkip files/dirs whose path contains one of these strings
includeNoOnly scan files whose path contains one of these strings
maxFilesNoMaximum number of files to scan (default: 2000)

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changedv0.1.5
    • changedInput schema / $schema
      Previous value: -"http://json-schema.org/draft-07/schema#"New value: +"https://json-schema.org/draft/2020-12/schema"
  2. Addedv0.1.1

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the burden — and it delivers a genuinely non-obvious behavioral trait: variable references do not resolve across files, so Crew/GroupChat members defined elsewhere will not be linked. That prevents misinterpretation of results. It omits safety profile (read-only) and any cost/limit context beyond the schema default.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with zero filler; the scanning scope is front-loaded and the caveat follows immediately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but the description indicates the return is per-file excessive-agency paths and warns about the main analysis limitation. It leaves the exact finding shape and behavior on very large trees (beyond maxFiles) unstated — a minor gap, not a blocking one.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so path, exclude, include, and maxFiles are already fully documented. The description adds no syntax, format, or interaction detail for these parameters, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (recursively scan) and resource (a directory of Python files) plus the output (excessive-agency paths per file). It does not explicitly name scan_file/scan_text as the narrower alternatives, so sibling differentiation is only implied by the word 'directory'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear operating context: use this when you want whole-tree coverage, and expect per-file isolation rather than cross-file resolution. It stops short of explicit 'use X instead' routing or exclusions, so it is good context without full when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools