Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, and it does disclose the two most consequential traits: artifacts are immutable, and reusing artifactId chains versions instead of overwriting. It says nothing about required identity/permissions (agentId), content size limits (48k), or what happens on conflicting names, leaving real gaps for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.