Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure, but it only says 'classify.' It does not state whether the operation is read-only, whether it can modify session state, how invalid or missing bindings are handled, or what side effects might occur. This is insufficient for an agent to predict the tool's behavior safely.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.