Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does a solid job: it declares the operation read-only, explains the return payload structure (base64 content plus name and mime type), and discloses the 5 MB size ceiling. It stops short of covering auth, not-found behavior, or response size implications, but it adds meaningful context beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.