Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds genuine behavioral rules beyond them: a 75% coverage gate, a 60% hack cap, and too-close-to-call handling below 3 points. These disclose that results may be gated or flagged, though the description doesn't state what the agent sees when a gate trips.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.