Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations available, the description must disclose behavioral traits on its own. It only states 'delete,' which implies destructiveness, but doesn't clarify permanence, cascading effects, or prerequisites. The agent is left without information about what happens to related data or whether confirmation is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.