Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark it read-only and non-destructive, and the description adds real behavior: the 8-second wait ceiling, early return on arrival, the re-call-to-keep-waiting pattern, and an explicit trust boundary treating inbound content as data rather than instructions. The injection warning is exactly the kind of context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.