Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safe-read profile (readOnly, idempotent, non-destructive, closed world), and the description still adds meaningful behavior beyond them: a hard cap of 5 results, AND-matching over name words in any order, and a privacy rule that phone digits are only partially exposed to disambiguate namesakes. That result-truncation and masking detail is not derivable from the annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.