Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations to indicate safety, the description carries the full burden of behavioral disclosure. It merely says 'Execute a shell command,' which implies arbitrary and potentially destructive actions but does not warn about side effects, permissions, or the need for caution. This is a significant transparency gap for a tool that can modify system state in unpredictable ways.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.