Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose side effects. It does not mention that installation modifies the system, whether elevated permissions are required, or what happens if the package manager already exists. The mutating nature is only implied by the verb.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.