Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the safety annotations, it discloses access requirements ("Public; no OAuth required"), scope limits (only moderated, published reviews; no pending reviews), and result interpretation ("an empty list means no published reviews, not a zero-star rating"). These are exactly the behavioral facts an agent needs that annotations alone do not provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.