Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so safety is largely covered. The description still earns credit for the non-obvious guarantee that 'proposed changes never run here', which is a behavioral claim the annotations do not express, plus the note that evidence is returned alongside the insight.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.