Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description states 'reset' which implies a destructive change, but no annotations are provided. The description does not disclose behavioral traits such as whether the password is immediately changed, if confirmation is required, or any rate limiting. For a sensitive admin operation, more transparency is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.