Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safe, idempotent, non-destructive, closed-world read profile. Beyond that the description adds genuine behavioral detail: prerequisites (no session, no foregrounding), the return shape (UTF-8 text or empty string), and a version/environment failure mode ('no HID available' on iOS 17.x / no-tunnel). Only the error/limitation behavior is spelled out, not retry or rate considerations, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.