Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It discloses that no secrets are returned, which is important, but it does not state whether it is a read-only operation, whether it makes network calls, or what happens if credentials are invalid. The absence of annotations is partially compensated by the 'no secrets returned' note, but other behavioral aspects remain unclear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.