Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral disclosure burden. It discloses that results are limited to 'Papers in our database', explains that depth=2 expands one hop, and states the 200-result hard cap. It does not mention auth requirements or output structure, but the essential behavioral traits are present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.