Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description includes '[read-only]' to indicate it's a safe operation, which is helpful since no annotations are provided. However, it lacks details on behavioral traits such as rate limits, authentication needs, or what 'valid ADT object types' entails (e.g., format, scope). With no annotations, the description carries the burden but only partially fulfills it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.