Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of disclosing side effects. It only says 'Send test notification' without revealing whether it actually delivers a real notification, what happens on failure, or any impact on the system. This is a significant gap for a tool that likely sends something externally.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.