Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must carry the burden of behavioral transparency. It states the action (enable) and the effect (restore VPN access), which is a positive behavioral disclosure, but it does not mention any side effects, permissions required, or reversibility. The description is consistent with the action of enabling a user.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.