Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true and idempotentHint=true, so the safety profile is carried structurally. The description adds genuinely new behavioral context: the response shape (id, name, clinic, changed fields) and the privacy rule that contact details are never returned. It omits what happens to fields not supplied, which is the remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.