Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the description's job is to add what they can't say. It does that with "does not run recognition again," which tells the agent this call is cheap and will not re-trigger pipeline work, and it discloses that the response includes a private open-in-ChefBear link. It stops short of describing what happens when a menuId is invalid or belongs to another account, so it is strong rather than complete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.