Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so safety is covered structurally; the description reinforces the read-only nature ("No compra nada") and, more usefully, enumerates the payload contents (productos, envío, total, entrega de demo). It doesn't cover failure modes such as an invalid or expired token, which is the main remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.