Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose one genuinely useful trait that structured data lacks: it spins up a new owned STA process and never touches the user's live session, implying it is a safe, non-intrusive probe. However, it says nothing about permissions, side effects on Renga itself, latency, or what a failure looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.