Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/openWorld/non-destructive, and the description adds real context beyond them: it is free, rate-limited, and returns only 'safe signals and issues' rather than the paid evidence bundle or attestation. This sets expectations about output scope and throttling that the annotations do not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.