Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safe read-only, idempotent, closed-world profile; the description goes well beyond that by disclosing the filtering rule (CPIC level-A, allele-positive), the meaning of derived output fields (discordant = present in exactly one; whose_hla = both/recipient_only/donor_only), the source corpus (CPIC/PharmGKB), the keying (two-field HLA allele), and the 'reports both, decides nothing' decision-support caveat. That is rich context an agent cannot get from the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.