Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, and it does usefully disclose that nothing remote is touched ('不动任何远端数据') — a real safety signal against the mutating siblings. It does not say what the call returns (an HTML string? a rendered preview?) and there is no output schema to cover that, leaving a meaningful gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.