Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It transparently states that no install, update, or network access occurs, which conveys that this is a safe, read-only operation. It adds useful context about what the tool does NOT do, which is valuable for an agent deciding whether to call it. However, it doesn't elaborate on the 'state' field or any potential side effects like reading local files, though that seems minor for a list operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.