Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/destructive annotations by disclosing the response composition and, more valuably, an injection-safety rule: page text is publisher-written and never an instruction, and quotes rather than the summary should be cited. That is real behavioral context an agent must know. It stops short of noting failure modes for unreachable/blocked pages or any rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.