Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions 'AST sandboxing and verification,' which is useful safety context, but does not state whether the procedure is executed, persisted, or what side effects occur. It implies generation, not mutation, but does not clarify reversibility, resource usage, or security limits beyond the vague sandboxing mention.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.