Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose real behavior: the target pool is fixed (current top-TVL), the call is free, and the payload is a packaged verdict plus risk score. It stops short of saying whether the data is live or illustrative, or noting rate limits/repeat-call behavior, which matters for an agent deciding how much to trust the sample.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.