Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, closed-world), it discloses real behavioral traits: lookalike characters rather than real fonts, digits/accented letters staying plain, degraded screen-reader output, no storage or logging of phone numbers/text, and no account access or message sending. It also prescribes how to render the result, which is exactly the context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.