Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of disclosing behavioral traits. It only states the basic list operation, without explicitly noting that it is read-only, whether it requires an active connection/project, or any potential side effects. This is a minimal disclosure for a read operation, similar to the 'update_drive' example.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.