Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (destructiveHint=false, openWorldHint=false), the description adds key behavioral details: it renders on a backend document engine (Gotenberg), returns bytes, and explicitly states 'Read-only'. This provides useful context about safety and execution environment, though it does not discuss error behavior or prerequisites.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.