Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint and openWorldHint, and the description goes well beyond that: chat_gpt data is US/English only and passed location/language values are silently ignored, payloads are capped at 10 keywords, billing is pay-as-you-go, and errors arrive as a one-element list [{error,...}] with named codes (api_error/task_error, dfs_timeout, dfs_unreachable, invalid_platform) that must be checked before evaluation. That is precisely the silent-override and failure-mode information an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.