Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide no behavioral hints (no readOnly/destructive flags), so the description carries the full burden. It states that the tool types text, implying a write operation, but does not disclose side effects (e.g., overwriting existing text) or any prerequisites like session activity. This is minimal but not misleading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.