Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/openWorld, but the description adds useful operational detail: results are capped at 6 choices, copy/share controls are optional, and inputs should be short keywords stripped of personal data. It does not discuss latency, rate limits, or result ranking, so it stops short of full behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.