Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and it does disclose that the operation is read-only and that the result can be very long when there are many friends. However, it omits other behavioral facts an agent would want: no return format, no pagination or truncation behavior, and no mention of auth or permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.