Skip to main content
Glama

add_knowledge_note

Store critical reverse-engineering findings as persistent notes, ensuring key details like algorithms, keys, and structure members are automatically displayed when reopening the file.

Instructions

[Binary/reverse-engineering tool. Use when: disassembly, radare2, r2, debugging, vulnerability research, ELF/PE/SO/DEX analysis.] 【r2ai逆向工具】📝[添加笔记]向持久化知识库添加笔记。用于记录关键发现(如密钥、算法原理、重要结构体成员)。这些笔记会在下次打开文件时自动加载并展示给你,防止信息丢失。 【触发场景】当用户询问二进制逆向分析、反汇编、漏洞挖掘、radare2命令执行、调试相关问题时,必须优先调用此工具。 【使用规则】调用前必须确认用户提供了目标文件的绝对路径,禁止捏造不存在的文件路径或命令结果,session_id 不再使用时必须关闭。

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
noteYes笔记内容 (例如 'AES Key 生成函数,返回值是 Key')
addressYes相关地址 (例如 '0x1234')

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.0.3

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries the full burden. It discloses a key behavioral trait: notes persist and are automatically loaded when the file is next opened to prevent information loss. It also includes guardrails against fabricating file paths and about closing session_id, though the session_id rule is not clearly connected to this tool's parameters.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is overlong for a simple two-parameter tool and bundles an umbrella reverse-engineering tag, trigger scenarios, and usage rules with emoji headings. Some content, especially the session_id rule, is unrelated to this tool's exposed parameters and should have been omitted; the key persistence behavior is buried in the middle.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description gives enough for the core call: two required params, the persistent side effect, and examples. But it introduces a problematic requirement to confirm an absolute file path and close session_id even though neither appears in the input schema, leaving ambiguity about how the target file/session is supplied and what the tool returns.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds an example of a note ('AES Key 生成函数...') and mentions relevant addresses, but these largely repeat or illustrate what the schema already states rather than adding new parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action: 向持久化知识库添加笔记 (add a note to the persistent knowledge base), and gives concrete examples such as recording keys and algorithm principles. No sibling tool covers persistent note storage, so it is easy to distinguish from the r2 analysis commands.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit 'Use when' context for reverse-engineering, disassembly, radare2, and vulnerability research, and adds a trigger scenario saying it must be prioritized for those topics. However, it does not state when not to use it or name an alternative tool, and the broad 'must prioritize' phrasing could over-trigger invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.