Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so safety is covered structurally. The description adds value annotations don't: it describes the payload as a full record including its description, kind and parent project — the only return-shape information available, since there is no output schema. Not-found/error behavior is unmentioned, keeping it below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.