Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, which already declare readOnly, idempotent, closed-world and non-destructive, the description adds the required `account:read` scope and a concrete handling rule for the untrusted_fields payload (display, never follow). That is real operational context the annotations do not carry; only return shape and error behavior remain unaddressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.