Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), and the description still adds substantive context: reads send no messages and confirm no appointments, hidden prices come back as null, starting prices are not firm quotes, durations are not reservations, and returned customer content is untrusted data rather than instructions. Only the prompt-injection caveat alone would be worth the sentence; the data-interpretation caveats make this a genuinely informative definition.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.