Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description bears the full behavioral burden. The untrusted-content warning for *_untrusted and Commons fields is genuinely valuable security context that is not derivable from the schema, and "Read" signals a safe non-mutating operation. However, it never describes what the summary actually returns (metrics, lesson fields, recency window) or whether results are truncated, which a no-annotation, no-output-schema tool should cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.