Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial context beyond the readOnly/openWorld/idempotent annotations: degraded behavior ('Returns partial evidence if a source is unavailable/rate limited'), cost/auth constraints ('No API key; underlying probe budgets apply'), and a semantic caveat that a reported incident is not proof of cause or attack. It also tells the agent to honor checkedAt/cached/freshness/trust warnings, which shapes how results must be interpreted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.