Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral burden. It does add real value by disclosing output characteristics that matter for trust calibration: every entry ships with an evidence source and a risk warning, and entries lacking evidence say so themselves. That is genuinely useful context beyond the schema, but the description is silent on read-only nature, volume, pagination, and whether loading the list has any side effect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.