Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds substantial behavior beyond them: content-stripping rules (scripts, styles, nav, footers, forms, embeds dropped; main/article preferred), isolation in a resource-limited child process, 422 html_too_complex thresholds, latency range, and that failed-limit calls are not charged. The untrusted-data warning about page text and on-chain strings is a genuinely valuable operational caveat.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.