Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description must convey behavioral traits. It states that the tool lists environment variables, implying a read operation, but does not mention whether values are shown, if any authentication is required (api_key hint), or if there are any limitations or side effects. This leaves key gaps for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.