Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. 'List all knowledge bases' implies a read-only operation returning a collection, but it does not state whether this is safe/non-destructive (though implied), whether pagination is involved, or whether the scope is limited to the current tenant. The behavior is straightforward enough that a score above 2 is warranted, but the lack of any context about response shape or filtering limits it to a 3.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.