Skip to main content
Glama

generate_report

Creates a Markdown, JSON, or HTML report from prompt-injection test results, summarizing successes, responses, and notes for security analysis.

Instructions

生成测试报告

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
formatNo报告格式(默认:markdown)markdown
test_resultsYes测试结果数组

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. Beyond implying a report is generated, it says nothing about side effects, permissions, output persistence, or whether generation is deterministic. A one-line description leaves the behavioral contract largely unspecified.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, short, front-loaded phrase with no redundant or filler content. It is efficient, though brevity here comes at the cost of information rather than from careful trimming.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no annotations, no output schema, and a nested array parameter, the description should say more about behavior and usage. A report-generation tool that accepts test results and a format but explains neither its purpose context nor its output is incomplete for an agent to invoke confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: both the format enum (markdown/json/html with default) and the test_results array are documented in the schema itself. The description adds nothing beyond the schema, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description '生成测试报告' states a verb (生成) and resource (测试报告), so the basic action is clear. However, it does not distinguish this tool from any sibling, several of which (analyze_response, run_test_sequence) also work with test output. It is vague about scope relative to the toolset.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives. Nothing indicates whether it should be called after run_test_sequence, whether it supersedes analyze_response, or under what conditions report generation is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.