Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly/idempotent/non-destructive/openWorld=false), the description discloses the interaction model — the customer selects the file and bytes go directly to Brix36 rather than through the tool — and that no paid work/credits are consumed. That flow detail is genuinely additive, though it does not cover what happens after selection (e.g., whether a confirm step follows).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.