Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure, but it only says a command is 'detected' and run. It does not disclose potential side effects, whether the build modifies the filesystem, what command is actually executed, whether it is safe, or what output or errors might occur. This is a significant gap for a tool that executes a command.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.