Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses only the invoked command; it says nothing about runtime, DB side effects (Kernel tests typically bootstrap and write to a test database), required permissions, or failure behavior. Has an output schema, which covers returns, but side effects are unaddressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.