Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, closed-world behavior, and the description still adds real substance: counts are rounded for non-super-admins, counts below 3 collapse into a band, and company names and raw job counts are withheld with an explicit 'do not guess them' instruction. What is missing is failure behavior for an unknown or unpublished slug.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.