Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the burden of behavioral disclosure. It clearly states that the tool reads existing stored context rather than modifying it ('读取'), and it enumerates the kinds of data returned: preferences, rules, project status, and confirmed memories. It does not detail failure modes or return formatting, but the core read-only behavior is transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.