Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false and openWorldHint=false, so safety is covered; the description adds real context beyond them — that answer rendering is in-chat, that citation labels come from the backend and must not be invented, and that pending jobs are viewable. It does not cover failure behavior for an expired/unknown job_id, which is the main gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.