Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the readOnly/idempotent/destructive annotations by disclosing that verification runs entirely locally, the plugin code never leaves the user's machine, and the server performs no computation. It also clarifies that the tool returns a recipe to follow rather than performing the verification itself, which is a crucial behavioral caveat.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.