Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the surface description carries the behavioral disclosure burden. It adds a useful safety guarantee: 'Never returns the token,' which tells the agent that handling the sensitive credential data will not leak. It does not state what happens if the file is missing or whether the tool raises errors, but the explicit privacy behavior is a strong positive signal.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.