Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the full burden of behavioral disclosure. It states that the tool runs axe-core and custom checks, but does not reveal whether it is read-only, what it returns, if it modifies state, or any prerequisites. This is minimal transparency for an execution tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.