Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world behavior, so the safety profile is covered. The description adds genuine scope information beyond that: only metadata/approved fields are returned, and secrets, contacts, and original files are excluded, which tells the agent what it will not get back. It stops short of explaining pagination behavior despite limit/offset params.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.