Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions 'read-only recommended,' which hints at safety concerns, but doesn't specify permissions required, potential side effects (e.g., performance impact), rate limits, or what the output looks like (e.g., result format, error messages). For a tool that executes raw SQL with zero annotation coverage, this leaves significant gaps in understanding its behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.