Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must fully convey behavioral traits. It only states what it checks ('health-check', 'scan for secrets') but does not disclose whether it is read-only, whether it modifies files, what it returns, or any side effects. For a diagnostic tool, this is insufficient transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.