Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and only says it validates a code. It does not disclose what validation entails (signature/hash check, lookup), what is returned on success or failure, whether this requires authentication, or how errors are surfaced. This is a significant gap for a verification tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.