Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world. The description adds that it is 'pure calculation' and performs no rendering or data saving, which reinforces the safety profile with some context. It does not cover rate limits, authentication, or failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.