Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It only states 'Get a firewall policy by UUID' without mentioning that the operation is read-only, its safety profile, any prerequisites, or error behavior (e.g., what happens if UUID not found).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.