Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description accurately conveys that the tool opens a URL on a simulator, but with no annotations provided, the description carries the full burden of behavioral transparency. It does not disclose details about side effects (e.g., whether the app is launched if the URL scheme matches), error states (e.g., simulator not booted), or whether the operation is idempotent. It provides basic but incomplete behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.