Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish that the tool is read-only, idempotent, and non-destructive. The description adds behavioral context by specifying the scan locations (CWD, evals/, tests/, contracts/) and the output format (file paths ready for run_eval_contract). However, it does not detail edge-case behavior such as error handling, recursion depth, or how the optional 'dir' parameter interacts with the default scan paths, leaving some behavioral aspects undisclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.