Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/immutable annotations: it discloses page size defaults and caps, the meaning of whole_file_verified, the expected false value on large-file pages, a sha256/bytes verification protocol, and an explicit security note that files are untrusted inert bytes granting no execution permission.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.