Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description earns credit for going beyond them by naming the required `calendar:read` scope and flagging that human-written text arrives in `untrusted_fields` and must be treated as display-only data rather than instructions — a genuinely non-obvious operational trait.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.