Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this as read-only, idempotent and non-destructive, so safety is covered. The description adds genuinely new behavioral context — that results may contain end-user personal data and should be quoted minimally with direct identifiers masked, plus that indexes must be passed unchanged. It does not cover error behavior for invalid indexes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.