Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and covers important behavioral traits: token_budget is required and caps response size, reserved-prefix topics are stripped, and audit_links include a CLI verification hint. It also reveals the feature-flag gate. It does not mention side effects or billing consequences, but for a check operation it is reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.