Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavior itself. It reveals persistence but not what opening or initializing does: whether it creates files, changes state, is idempotent, or modifies an existing directory. For a tool that may initialize (write) a workspace, this is a substantial transparency gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.