Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses the unguessable 128-bit token URL, the ~15-minute expiry, that a re-run is required for a fresh link, and that file bytes are never returned inline. The non-idempotent annotation is explained rather than merely declared, and the content of the file (names, emails, custom fields, personal links) is spelled out.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.