Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations, so the description carries the full behavioral burden, yet it only says 'read content'. It does not disclose what happens if PLAN.md is missing, whether the default `full=true` returns the entire file versus a summary, or any output format details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.