Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety bar is low; the description nonetheless adds real behavioral context beyond them — the exact scope of items returned, that organization-authored templates are never included, and that it never initiates execution. Crucially it explains how to interpret an empty result ("not a statement about any other aictrl capability"), which prevents a common misreading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.