Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the outputs ('what was added, denied, and the safety gate decision'), which gives some behavior insight, but without annotations, it fails to clarify potential side effects, rate limits, or state modifications. The term 'poll cycle' may imply destructive marking of items, which is not addressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.