Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the tool read-only, idempotent, and non-destructive, so the core safety profile is covered. The description adds only minimal behavioral context, such as the fact that returned profile links are 'live,' and does not disclose auth requirements, caching, or response behavior. There is no contradiction with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.