Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint and openWorldHint, so the safety and purity profile is largely covered. The description usefully clarifies that filling targets named form fields and that flattening is optional, but says nothing about what happens to unfilled fields, existing values, or how failures (e.g., a non-interactive PDF, a refused private URL) surface.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.