Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations supplied, the description carries the full burden and does deliver the single most important trait: this is read-only, and mutating operations (approve/replay) are explicitly out of scope. It says nothing about return shape, whether list is paginated, or how errors surface for an unknown workflow_id, so the safety profile is covered but operational behavior is not.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.