Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world semantics, so the safety profile is covered. The description adds the meaningful scope constraint ('unshipped'), but says nothing about ordering, default page size of 25, or that results cap at 100 — an agent could silently miss orders. No contradiction with openWorldHint=false, since 'connected store integrations' is a bounded set.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.