Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (not read-only, not destructive, not idempotent), so the bar is lower. The description adds genuinely operational context: the execution loop for >10 attendees, which the agent must implement itself. It doesn't warn that non-idempotent retries of a partially completed batch will duplicate attendees, nor what happens on per-attendee validation failure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.