Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions 'prune' and 'clean up unused resources,' which implies a destructive operation, but it does not disclose what resources are actually removed (containers, images, volumes, networks), whether running resources are safe, or whether the operation is irreversible.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.