Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already say readOnly, idempotent, and non-destructive, so safety is covered. The description still adds real value: a succeeded job returns a FRESH private download_url, source access is rechecked at download time, and expired or revoked sources will fail. That is genuine behavioral context an agent cannot get from annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.