Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry the safety profile (readOnlyHint=false, destructiveHint=false, openWorldHint=true). The description adds useful context beyond the annotations: the WCAG 2.2 edition, the fact that the analysis comes from the DOM, and the claimed output (violations with fixes). Notably, the wording 'static audit' is implied read-only, and that is not contradicted by the annotations but readOnlyHint=false warns the opposite; because the description never explicitly claims read-only, it is not a contradiction, though side-effect expectations stay fuzzy.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.