Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond annotations: 500 KiB size cap, 5 s timeout, redirect handling, RFC 9309 rules, exact verdict semantics including skipped cases, rate limits of 10/min and 30/hour per network, and a 10-minute cache. These details materially affect invocation and result interpretation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.