Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It clearly states the tool returns field metadata and nothing else, implying a read-only, side-effect-free operation. It also specifies the output's composition (key, label, type, required, help text, options) and how the output should be consumed. This is sufficient for an agent to understand the behavior; it does not claim any mutation or side effects, and there is no contradiction with any annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.