Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld, non-destructive, so safety is covered. Beyond that, the description adds only which fields per prefix, but says nothing about failure modes for unknown ids, size limits, language behavior defaults, or what 'selected brand analysis language' depends on. With annotations carrying the safety profile, this still leaves gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.