Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false and openWorldHint=false, so 'Read only' largely restates structured data. The genuinely additive phrase is 'saved data,' which signals the results are a stored snapshot rather than a live computation, plus the note that audiences are flagged for delivery viability. No permission requirements or refresh/freshness semantics are spelled out.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.