Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), so the description's job is to add return-shape context, which it does: ordered steps with skill name, inputs/outputs, and links. Minor gaps remain around behavior for unknown bundle ids and whether any bundle-level metadata beyond steps is included.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.