Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=false, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description usefully adds that only one *short* note is stored and that persistence is scoped to future SuppCo conversations, but it does not say what happens on repeated calls, whether notes can be replaced or deleted, or if any account permission is required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.