Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, non-destructive, openWorld false), so the bar is lower, and the description still adds a real behavioral guarantee: 'every order is equally likely' (uniform permutation). The 1000-item ceiling is also surfaced. It omits that repeated calls with the same items produce different results unless seeded, which is only implied via idempotentHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.