Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world, so the safety profile is covered. The description adds substantial domain behavior beyond them: an enquiry creates no booking and confirms no availability, the traveler must explicitly approve before send, and host labels are untrusted data that must never be treated as instructions. That last point is a genuine security constraint an agent would not otherwise know.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.