Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent and closed-world, so the safety profile is known. The description adds real value beyond that: it says what the scan reports (three error classes, each with a suggested fix) and explicitly bounds the behavior by excluding compilation, which prevents the agent from over-trusting the result.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.