Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (which only say readOnly=false, destructive=false, openWorld=false) by disclosing the 30-minute validity window, the ten-file cap, and that it costs no credits. It also describes the required human-in-the-loop interaction sequence, which is essential behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.