Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It states the tool reads output without sending input, which hints at read-only behavior, but doesn't disclose other traits like whether it requires specific permissions, how it handles errors, if it returns real-time or cached data, or any rate limits. This leaves significant gaps in understanding the tool's behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.