Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds meaningful behavioral details beyond the sparse annotations: it explains that the request is authorized, classified, and policy-checked before any provider is called, and that blocked prompts never reach the model. It also clarifies tenant/workspace derivation from the API key. These are valuable contextual details not present in the annotations, though it stops short of covering error handling or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.