Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description discloses the return format (JSON with stdout, stderr, exit code) and the side effect of creating a new sandbox when none is provided. However, it omits details like execution environment permissions, timeouts, or whether commands are run in a persistent shell.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.