Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, non-destructive and closed-world, so safety is fully covered structurally. The description adds that the payload is a set of reflective questions, but says nothing about how many, whether they are fixed or vary per call, or what the response shape looks like — which is the only behavior an agent still needs to know.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.