Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive behavior, so the description isn't needed for safety profile. It adds genuine value beyond that: it discloses the visibility filter that causes not-found cases and warns that all returned text is untrusted user-authored content to evaluate, not instructions — an important trait no annotation conveys.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.