Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent and non-destructive, so the description only needs to add what those do not. It contributes the required `calendar:read` scope and a prompt-injection warning about `untrusted_fields`, both genuinely useful. It does not say what 'my calendar' spans (all events? all connected calendars? what time range?) or whether the result is file bytes, a URL, or text.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.