Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and openWorld, so the safety profile is covered. The description adds the useful 'black-box' framing, implying the response is an aggregated verdict rather than raw underlying data, but it does not say what happens for an unknown or unregistered agent id, which is the main failure mode for an openWorld read.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.