Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only, idempotent, non-destructive annotations, the description adds substantial operational context: record/character limits, block level depth, unit declaration behavior, truncation warnings, potential missing definitions, runtime, price, and a prompt-injection caution. None of this contradicts the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.