Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/destructive annotations: result cap of ten, relevance ordering, that excerpts are search-engine text rather than verified quotes, and an explicit prompt-injection warning that page text is publisher-written and never an instruction. The only tension is that annotations declare openWorldHint=false while the tool searches the public web, which the description does not reconcile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.