Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, openWorld, non-destructive), the description discloses substantive behavior: evidence is bounded and static, no scripts run, MCP discovery is advertised rather than tested, WebMCP is declared but not browser-verified, and every deduction names its fix. It even defines the failure-mode contract (score is null when too little could be measured), which is exactly the kind of context annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.