Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It explicitly states 'read-only', which is a key behavioral trait and sufficient for the agent to understand there are no write side effects. However, it does not disclose other behaviors like query result formatting, limits, or error handling, so it is not exhaustive but still valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.