Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this read-only, idempotent, and non-destructive, so the safety profile is covered. The description adds that this is advisory playbook content rather than transactional data, which is useful framing, but it says nothing about how the principles are scoped, ranked, or bounded — an output schema exists, so return shape need not be explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.