Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, closed-world, non-destructive behavior, so safety is covered. The description adds genuinely new context with 'Returns canonical URLs suitable for ChatGPT Company Knowledge citation,' which tells the agent about output shape and downstream use, but says nothing about the per-entity limit cap or truncated/empty results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.