Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. '清理' (clean) implies a destructive operation, but it doesn't specify what gets destroyed (e.g., temporary files, session data), whether it requires specific permissions, or if there are rate limits. The description lacks behavioral details needed for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.