Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=true, so the safety profile is covered structurally. The description adds genuine context by disclosing the internal scope (one audit plus N prompt checks against a live external service) and that the result includes an aggregate citation rate. It omits operational traits that matter for an open-world, per-prompt fan-out call: latency, cost, and failure behavior for an invalid API key.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.