Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It only says 'enable or disable' without explaining side effects (e.g., whether it disconnects clients, requires admin access, or causes a restart). The confirm and dry_run parameters hint at caution but are not explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.