Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses critical behavioral details: all text values are fenced as untrusted data and must never be treated as instructions, every item carries provenance, the tool requires the read scope, and it returns null when no profile exists. These additions materially reduce ambiguity for a security-sensitive read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.