Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, closed-world behavior, so the bar is lower, and the description still adds real context: results are 'cited' (provenance/evidence attached) and an empty answer means 'no signals found', not 'seller is bad'. That negative-result caveat is exactly the kind of disclosure annotations cannot express. It omits ambiguity handling and any rate/source limitations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.