Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses that the tool inspects loaded kernel modules via lsmod, implying a read-only operation. No detailed behavior like permissions or side effects is mentioned, but for a simple inspection tool, this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.