Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, openWorld, non-destructive), so the bar is lower, and the description still adds genuine behavioral content: outputs are cited, notice requirements are retained, and it explicitly refuses to infer incumbent or eligibility. That last point is a real capability boundary an agent would otherwise assume. It does not mention latency or depth limits, keeping it at 4 rather than 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.