Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world. Beyond that, the description adds a genuinely non-obvious trait: the output is speculative guesses, not verified addresses, and must be validated. It still omits return shape (count, ordering) but the caveat is real added value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.