Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes beyond the annotations by disclosing a real prerequisite (host resource access), that no source is fetched, that geometry is bounded to WGS84, and that the tool performs no legal parcel verification and no file edits. The concrete meaning of 'bounded' (extent/vertex limits) and any failure modes are left unstated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.