Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld and non-destructive, so the safety profile is covered. The description usefully adds that entry files are resolved live from each package (i.e., network lookups at call time), but says nothing about failure behavior for unknown packages or how unpinned versions resolve to a moving latest.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.