Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnlyHint, idempotentHint, destructiveHint=false, openWorldHint=false), but the description adds genuinely new behavioral facts: the service makes no model calls, runs no work, and stores no private files, clarifying it is an assembly/retrieval step rather than an execution step. It also notes the host AI gathers task and output questions in conversation, so 'no website context form is required.' Only the return shape is left unaddressed, and an output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.