Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: cached-vs-provider path, credit consumption, persistence into the shared sponsor directory, the meaning of a pending status, and the fact that retrying does not re-hit the provider. This is exactly the contextual meat the four annotations (readOnlyHint=false, openWorldHint=true, idempotentHint=true, destructiveHint=true) cannot convey on their own.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.