Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and idempotentHint=false, and the description adds nothing beyond the endpoint path. Because it is flagged as non-read-only but described as an 'audit' (which sounds like a read), the agent gets no explanation of what state this mutates, whether it consumes/records receipts, or what permissions are required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.