fix(tools): tell the LLM about the path sandbox in tool descriptions

Addresses the low-confidence notes from the Copilot review on #6692.

Both tools' descriptions were pre-sandbox wording, so the model learned
about containment only by attempting a path and reading the error back.
Both now state that access is confined to the tool's allowed directory
and that a path resolving outside it is rejected.

The wording deliberately says "the tool's allowed directory" rather than
"the working directory", because the root is base_dir when one is set,
and naming the absolute root would leak it into the prompt — the same
reason paths are redacted in errors.

Not changed: the notes also suggested advertising `encoding`. That is a
constructor-only field the model cannot set, so describing it to the LLM
would be misleading.

Also fixes a test docstring that contradicted its own assertion — the
public run() path does raise on schema validation failure, which is what
the test asserts.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: joaomdmoura

lib/crewai-tools/src/crewai_tools/tools/file_read_tool/file_read_tool.py

@@ -91,7 +91,7 @@ class FileReadTool(BaseTool):
     """
 
     name: str = "Read a file's content"
-    description: str = "A tool that reads the content of a file. To use this tool, provide a 'file_path' parameter with the path to the file you want to read. Optionally, provide 'start_line' to start reading from a specific line and 'line_count' to limit the number of lines read."
+    description: str = "A tool that reads the content of a file. To use this tool, provide a 'file_path' parameter with the path to the file you want to read. Reads are confined to the tool's allowed directory; a path that resolves outside it is rejected. Optionally, provide 'start_line' to start reading from a specific line and 'line_count' to limit the number of lines read."
     args_schema: type[BaseModel] = FileReadToolSchema
     file_path: str | None = None
     base_dir: str | None = None
@@ -124,7 +124,7 @@ def __init__(
         if file_path is not None:
             display_path = format_path_for_display(file_path, base_dir)
             kwargs["description"] = (
-                f"A tool that reads file content. The default file is {display_path}, which is read when 'file_path' is omitted. You can also provide a different 'file_path' parameter to read another file, and specify 'start_line' and 'line_count' to read specific parts of the file."
+                f"A tool that reads file content. The default file is {display_path}, which is read when 'file_path' is omitted. You can also provide a different 'file_path' parameter to read another file, though reads are confined to the tool's allowed directory and a path that resolves outside it is rejected. Specify 'start_line' and 'line_count' to read specific parts of the file."
             )
 
         super().__init__(**kwargs)

lib/crewai-tools/src/crewai_tools/tools/file_writer_tool/file_writer_tool.py

@@ -81,7 +81,7 @@ class FileWriterTool(BaseTool):
     """
 
     name: str = "File Writer Tool"
-    description: str = "A tool to write content to a specified file. Accepts filename, content, and optionally a directory path and overwrite flag as input."
+    description: str = "A tool to write content to a specified file. Accepts filename, content, and optionally a directory path and overwrite flag as input. Writes are confined to the tool's allowed directory; a filename or directory that resolves outside it is rejected."
     args_schema: type[BaseModel] = FileWriterToolInput
     base_dir: str | None = None
     encoding: str = "utf-8"

lib/crewai-tools/tests/tools/test_file_writer_tool.py

@@ -110,7 +110,7 @@ def test_missing_required_fields(tool, temp_env):
 
 
 def test_missing_required_fields_via_run(tool, temp_env):
-    """The public entry point reports schema violations instead of raising."""
+    """The public entry point fails schema validation before reaching _run."""
     with pytest.raises(ValueError, match="validation failed"):
         tool.run(
             directory=temp_env["temp_dir"],

lib/crewai-tools/tool.specs.json

@@ -9931,7 +9931,7 @@
       }
     },
     {
-      "description": "A tool that reads the content of a file. To use this tool, provide a 'file_path' parameter with the path to the file you want to read. Optionally, provide 'start_line' to start reading from a specific line and 'line_count' to limit the number of lines read.",
+      "description": "A tool that reads the content of a file. To use this tool, provide a 'file_path' parameter with the path to the file you want to read. Reads are confined to the tool's allowed directory; a path that resolves outside it is rejected. Optionally, provide 'start_line' to start reading from a specific line and 'line_count' to limit the number of lines read.",
       "env_vars": [],
       "humanized_name": "Read a file's content",
       "init_params_schema": {
@@ -10058,7 +10058,7 @@
       }
     },
     {
-      "description": "A tool to write content to a specified file. Accepts filename, content, and optionally a directory path and overwrite flag as input.",
+      "description": "A tool to write content to a specified file. Accepts filename, content, and optionally a directory path and overwrite flag as input. Writes are confined to the tool's allowed directory; a filename or directory that resolves outside it is rejected.",
       "env_vars": [],
       "humanized_name": "File Writer Tool",
       "init_params_schema": {