Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden but only says 'Execute UDF function.' It does not disclose any behavioral traits such as whether execution is synchronous, whether side effects occur, or what happens on success/failure. This is completely insufficient for an agent to predict behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.