Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds minimal behavioral context beyond annotations. Annotations indicate this is not read-only, is open-world, non-idempotent, and destructive, but the description doesn't explain what 'destructive' means in this context (e.g., does it modify data or have side effects?). It also doesn't mention rate limits, authentication needs, or return format, though annotations cover some safety aspects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.