Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden and largely fails it. The word "command" vaguely hints at execution, and the schema mentions a dry-run default, but the description never explains whether checks mutate the project, what permissions or network access are needed, or how failures surface. Only the platform scoping is conveyed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.