Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses authentication requirements, shared refresh throttling, freshness handling, return contents, unresolved-entry behavior, Google informational notices, coverage.scope inspection, and untrusted-text handling. This is unusually rich behavioral context for an open-world read tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.