Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and non-open-world, so the safety profile is covered. The description adds behavior annotations don't carry: preserved input order with no reranking, and all-or-nothing failure if any supplied record is missing. It stops short of describing how records are resolved (fresh fetch vs cache) or any per-request latency/limit details beyond the 25 cap already in the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.