Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations carry the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false), so the agent knows this mutates state and is not idempotent. The description adds nothing beyond the endpoint path: it does not say what the audit records, whether re-running has side effects, or what auth is required. Note the mild tension between the read-sounding verb 'audit' and readOnlyHint=false, but this is not a direct contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.