Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It warns of deletion but doesn't state that the operation is irreversible, whether confirmation is required beyond the confirm parameter, whether it's recursive for folders, or whether there are any safeguards, error behaviors, or implications for the filesystem. This is a destructive operation with a `confirm` parameter, so those details are critical.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.