Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden and does well: it declares read-only behavior, lists result exclusions (hidden, suspended, synthetic records), and warns that public content is untrusted and must not be treated as instructions. It omits pagination behavior and rate limits, which keeps it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.