Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and compensates well by revealing validation behavior and refusal conditions: filenames are validated, and traversal/non-html/overwrite cases are rejected. It does not mention permissions or error-return style, but the output schema covers result structure, and the safety-critical constraints are explicitly disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.