Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond the readOnly/idempotent/openWorld annotations: dedupe of same-origin vs external links, dangling-CNAME sweeps, deprovisioned-service fingerprints, npm/PyPI registry lookups for install commands, and OSV MAL- advisories. It also honestly caveats 'evidence of a dangling service, not proof it can be claimed' and lists unmeasured items under notAssessed. A 5 is withheld only because response/caching details are left to the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.