Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries full burden but only states it lists metadata. It does not disclose that it is read-only, requires authentication, or what fields are returned. The term 'metadata' hints at no secret token exposure, but more detail is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.