Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, openWorld). The description adds genuinely useful behavior beyond them: deeplinks only appear where the client supports them, and secrets are always placeholders rather than real values. It does not mention any auth or rate-limit considerations, but for a read-only config generator that is a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.