Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosing side effects. It clearly discloses that publishing makes the flow JSON immutable, a critical irreversible behavior. However, it does not mention what happens to the flow status, whether the operation is idempotent, or any required auth/permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.