Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the non-read-only, non-destructive, closed-world profile, so the safety bar is lower. The description adds that it accepts PDFs and returns a result file, but it says nothing about quality loss from compression, whether the original is preserved, or how output is delivered (file, link, base64) — meaningful gaps for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.