Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, the description explains default return semantics (exact resource text equivalent to resources/read), the asFile mode's server-local path and SHA256, filesystem-sharing constraints for remote clients, that the server never executes a resource, and that capture content remains untrusted data. These are substantive behavioral disclosures.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.