Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnly, idempotent, non-destructive, closed-world behaviour, so the safety profile needs no repetition. The description contributes the useful nuance that counts reflect statuses 'now', i.e. a live snapshot rather than a frozen result. It does not cover retention or whether the batch record persists after cancellation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.