Useful formula
[Capability and output]. Use when [specific user intents, artifacts, or workflow state].Weak description
description: Helps with security.This provides no artifact, boundary, or trigger language and will collide with unrelated security tasks.
Stronger description
description: Review MCP client configuration for exposed secrets, unsafe commands, and excessive filesystem scope. Use when a user pastes mcp.json, config.toml, or asks for an MCP configuration security audit.Keep procedure in the body
Do not place the full workflow, examples, or policy in frontmatter. The description should route selection; the body should explain execution and verification.