Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It states the action ('Restore') which implies a potentially destructive operation, but fails to specify critical details like required permissions, whether this overwrites existing VMs, recovery point selection, or expected outcomes. This is inadequate for a tool that likely performs significant system changes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.