Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare read-only/idempotent/open-world safety, but the description adds real operational context: robots.txt is honored first, at most three pages of 250 products per store, the feed is read once, and a store that disallows the feed is reported as unavailable rather than fetched. These are non-obvious behaviors an agent would otherwise have to discover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.