Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose the safety profile: 'Read-only. No files modified.' It also describes the return shape (detected style, confidence, examples, recommendations). It stops short of auth/rate-limit context, but for a pure analysis tool this is solid disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.