Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, openWorld, non-idempotent), the description discloses the BYOK auth requirement and key formats, the external provider calls to GPT-4o/Claude/Gemini, the full return shape (per-case verdicts, pass rate, overall PASS/WARNING/FAIL, latency), an adjustable threshold, and the exact semantics of semantic_contains (TF-IDF cosine ≥ 0.4). These are material behavioral facts an agent needs before firing a billable network call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.