Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. The word 'metadata' usefully signals that the tool returns attachment metadata rather than the binary attachment content, implying a read-only operation. However, it does not disclose authentication requirements, error behavior, or the shape of the returned metadata.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.