Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With annotations already declaring readOnlyHint=false, openWorldHint=true, and idempotentHint=false, the description still adds real value: it discloses rate limiting, a bounded check scope, and that the run mutates the public saved snapshot (corroborating the non-read-only hint). It also adds the important caveat that DNS findings do not prove message authentication.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.