Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of disclosing behavior. 'Read' and the listing of outputs indicate a read-only operation and what to expect, but it does not address edge cases, error behavior, or whether the tool can return partial/in-progress results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.