Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavior, but it only says 'Reboot a running QEMU virtual machine.' It does not state whether the reboot is graceful or forced, whether a confirmation parameter is required, what happens if the VM is not running, or any side effects like data loss. The presence of a 'confirm' boolean in the schema is not explained, and the description provides no additional behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.