Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does real work: it discloses that download links appear only for listed plugins and that fields under "untrusted" are verbatim GitHub author content to be treated as data, not instructions. It does not cover not-found behavior, auth needs, or rate limits, keeping it below the top mark.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.