Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the read-only/idempotent/non-destructive profile, but the description goes well beyond that: it discloses the auth requirement, the hard capability limit (no publish or save), the side-effect-free nature of edits unless the line9: frontmatter is preserved, and the identity-stamping consequence of dropping that block. This is exactly the kind of mutation-adjacent context annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.