Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does convey that this is a passive metadata read with no arguments. However it says nothing explicit about side effects, idempotency or whether the tool ever mutates anything — it is trivially safe by construction, but the safety profile is inferred, not stated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.