Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the full burden and discloses nothing: not whether it writes or reads, what data it touches, whether output is durable, or what permissions are needed. Worse, "delivered as a copy-paste prompt pack with examples" mischaracterizes an MCP tool as a static document bundle, which can actively mislead an agent about what invoking it does.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.