Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description has full responsibility for behavioral disclosure. 'Read' implies a safe read operation, but the description does not explain what happens when the session does not exist, whether the tool returns or streams output, how the session output channel is scoped, or whether any side effects occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.