Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered. The description adds the content shape (source plus sample data), but says nothing about payload size, template provenance, or failure modes for a bad id — and the existence of an output schema further reduces what the description needs to carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.