Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden but provides minimal behavioral insight. It mentions filtering by project or scan, but doesn't disclose if this is a read-only operation, how results are returned (e.g., pagination, sorting), or any limitations like rate limits. This leaves the agent guessing about key operational traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.