Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses that the call is asynchronous ('starts a check in the background', returns scan_id with status pending, result not in this reply), that it costs one word of balance per word checked and re-charges on repeat calls, the 50-word minimum, and that failed preconditions (too short, too long, low balance) are not charged. It also frames the score as a likelihood, not proof — a caveat the annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.