Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It states 'force-kill' implying SIGKILL, but does not disclose side effects (e.g., potential data loss, impact on running processes, or whether the container is merely stopped or removed). The token requirement is mentioned but not explained (how to obtain or use it).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.