Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must disclose behavior. It only states 'delete' without mentioning irreversibility, error conditions (e.g., missing path), or side effects like deleting non-empty directories. The recursive parameter is in schema but not highlighted as a risk.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.