ssh_run

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses permission scoping and SSH key prerequisites, but does not mention behavior such as output handling, exit code propagation, or potential side effects of running arbitrary commands. This is useful context but incomplete for a tool without annotation safety hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences: the first immediately states the core function, the second adds permissions and prerequisites. No wasted words, well-structured, and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with no output schema, the description covers purpose, prerequisites, and authorization, but omits return value/error behavior and does not address when to choose this over local shell execution. While not inadequate, it has clear gaps in context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the description adds nothing beyond the schema. The permission scoping note refers to the host parameter but does not enhance understanding of individual parameters. Baseline 3 is appropriate as the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action (run a command) on a specific resource (remote host via SSH), and distinguishes itself from siblings like shell_run by specifying SSH and remote host. It also adds context about permission scoping, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage (for remote SSH command execution) but does not explicitly state when to use this tool vs alternatives like shell_run or git_run. It mentions prerequisites (SSH keys) and permission scoping but lacks direct comparison or exclusion of sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.