Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the full burden of disclosing behavioral traits. It states the tool drops a stream, implying a destructive action, but does not clarify permanence, reversibility (e.g., absence of undrop_stream), side effects on dependent objects, or that confirm=false results in no action. 'Requires confirmation' is vague—it does not explicitly say the drop is skipped unless confirm is set to true.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.