Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/openWorld, so safety is covered. The description adds real behavioral context: results are self-declared by the owner, the ENS name must resolve back to the address, and it deliberately avoids linking wallets to private individuals. It does not discuss rate limits or ambiguity handling, but the added disclosure is substantial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.