Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden and discloses key traits: upload only, no automatic prompt submission, and the requirement for absolute paths. It states an authorization constraint ('explicitly authorized by the user'), which goes beyond the basic operation, though it omits details like file-size limits or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.