Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses session scoping (other sessions' bots unaffected) and a watchdog side effect ('看门狗会自动关闭并提醒你'), but that clause is ambiguous about what exactly gets closed. It also omits irreversibility, whether the session record persists, and what reconnecting requires.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.