Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly and openWorld=false, and the description reinforces and explains that (paste-only, nothing saved, no URL fetched). It adds non-schema behavior the agent could not otherwise know: spec security schemes become credential definitions only, overflow operations land in warnings, and each operation binds to the spec's https host.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.