Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/open-world safety, yet the description adds substantial behavioral detail: distinctions between NXDOMAIN, NOERROR-without-records and SERVFAIL, honest admission of partial/truncated evidence, the CDN/caching caveat, quota and cache-window behavior (30s, 5s for partial), keyless auth, and an explicit SSRF-style assurance that it never connects to answer addresses. That is far beyond what the structured fields convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.