Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so credit here goes to the extra disclosure: the returned artifact set (details, source, latest version, SKILL.md text as a signed-in reader sees it, canonical URL) and the explicit 'does not install or run' boundary. It doesn't cover not-found behavior or what 'signed-in reader' visibility implies for anonymous callers.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.