Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, closed-world. The description adds real behavioral context beyond them: the data is append-only and never overwritten, the trend is defined as change_pct between first and latest, and observed_at vs as_of are distinguished. It does not mention the limit/cap behavior (default 100, max 500), which is the remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.