Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the burden of behavioral disclosure. It only states that it enables or disables, which implies mutation but does not clarify side effects, permission requirements, reversibility, or what happens when the filter doesn't exist. The dry_run parameter suggests a preview mode, but this is not explained in the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.