Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare non-read-only, non-destructive, non-idempotent, closed-world, which the description is consistent with: it produces a searchable PDF rather than describing an in-place mutation. It adds genuinely useful behavior beyond annotations: automatic language detection across 90 languages, and the fact that output is a PDF even for image inputs. It stops short of saying whether a new file is created and where it lands, or of noting size/page limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.