Skip to main content
Glama

scan_byte_entropy

Calculates rolling Shannon entropy heatmaps across PE, ELF, APK, and Mach-O binaries to detect packed or encrypted payloads and output visual distribution histograms.

Instructions

Calculates rolling Shannon entropy heatmap across any binary (PE, ELF, APK, Mach-O). Detects packed/encrypted payloads and outputs visual distribution histograms.

Input Schema

NameRequiredDescriptionDefault
block_sizeNoBlock size in bytes (default 512)
binary_pathYesAbsolute path to target binary

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the burden: it does disclose the operation is analytical and names two concrete outputs (heatmap and histograms), which is useful. However, it omits cost/performance characteristics for large binaries, whether the file is only read, and any limits, leaving notable gaps for an un-annotated tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single dense sentence front-loads the core operation and tacks on the outputs with zero waste. Nothing is redundant or padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With fully documented parameters, no output schema, and no annotations, this description covers the essential what-and-outputs. It leaves performance expectations and explicit read-only guarantees unstated, so it is nearly but not fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters (binary_path and block_size) are already documented in the schema. The description's mention of 'rolling' entropy only loosely implies how block_size is used and adds no syntax or constraint details, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (calculates rolling Shannon entropy heatmap) and enumerates the binary formats it handles (PE, ELF, APK, Mach-O). An agent can distinguish this analysis tool from siblings like detect_binary_protections without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'Detects packed/encrypted payloads' implies when this tool is useful, but it never explicitly says when to prefer it over siblings such as dynamically_unpack_binary or detect_binary_protections, nor does it state prerequisites like needing a raw file path.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.