Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint, idempotentHint, and openWorldHint=false, so the safety profile is covered. The description still adds non-obvious behavior: the data comes from a fixed 40-car demo corpus (a hard coverage limit), and images are served from the provider's own CDN with no attribution burden (a licensing trait). That is meaningful context beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.