Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, destructiveHint=false, and (notably) readOnlyHint=false, so the safety profile is supplied. The description adds that the operation inspects DNS, certificate, and liveness, and 'now' implies a freshly triggered live probe rather than a cached read - context that helps explain why readOnlyHint is false. It does not disclose latency, rate limits, or what happens if the domain is misconfigured.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.