Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, idempotent, non-destructive, openWorld), and the description adds genuinely useful behavior beyond them: the return is Markdown plus structuredContent, and the agent must switch on result.category ('nominal' | 'verbal' | 'not_found') before reading the body. It also discloses the content source/license. It does not cover rate limits or failure/auth conditions, and part of the return-shape detail is already carried by the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.