Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, and the description goes further by disclosing that results are static rather than official platform limits, that metadata is logged, and that no network access or persistent changes occur. One flaw: it says 'no image input' yet also says 'The image is analysed in memory and not stored', which is internally inconsistent and could confuse an agent about whether an image is accepted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.