Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the full burden. It does disclose that the scan is 'en vivo' (implying a live network fetch with latency and external dependency) and that output includes verifiable violations plus remediation links, but says nothing about scan depth limits, timeouts, rate limiting, or whether the call is purely read-only.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.