Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool creates a backup but doesn't mention whether this is a read-only operation, if it requires specific permissions, potential side effects (e.g., performance impact), or what happens on failure. This is a significant gap for a tool that likely involves system-level actions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.