Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, openWorldHint=true, and idempotentHint=false, so the safety profile is largely carried by structured metadata. The description adds only that it uses 'real PageSpeed Insights data' (a live external call), but never reconciles with the 'destructive' annotation, mentions latency/rate limits, or says whether results are persisted — an agent could reasonably mistake this for a harmless read.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.