Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds real context: semantic search only exists in some workspaces, results mirror list_creatives' fields, and output is truncated when matches exceed limit. The one gap is that truncation is disclosed without saying how to retrieve the remainder beyond raising limit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.