Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safe read-only, idempotent, closed-world profile, and the description adds real value on top: it generates a PNG artifact, returns results/conditions/assumptions/editable link/share page, and explicitly disclaims account access and order execution. It does not disclose rate limits or whether repeated calls accumulate artifacts, which is a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.