Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided (no readOnlyHint, destructiveHint, etc.), the description carries the full burden. It states the tool 'lists' containers, implying a read-only operation, which is consistent. The description doesn't add any additional behavioral context such as whether it can be slow with many containers, whether it requires Docker daemon access, or any side effects. It is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.