Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses temporary browser sessions, blocking of non-GET requests, no user credentials, reporting of missing controls and incomplete runs, possible remote effects from public GET requests, and the limitation that observations are not proof of transmission or compliance. These details materially expand the agent's understanding of the tool's behavior and risks.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.