Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint/destructiveHint, so safety is covered. The description adds real behavioral context beyond that: it defines what by_verdict actually counts ('completed assessments across every status'), what 'new' means (undecided inbox matches first found by the latest completed scan of their kind), and what active_scans measures.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.