Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so safety is partly covered; the description adds the non-obvious trust boundary that reading never installs, executes, or authorizes the skill, plus that referenced text assets are bounded and allowlisted. It stops short of describing the default when revision is omitted or what the response shape looks like, but the output schema covers the latter.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.