Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the read-only, idempotent, non-destructive profile, and the description adds useful operational context the annotations cannot: expected latency under 1 s, the USD 0.001 price with no free tier, the first-page-only limitation, and a prompt-injection warning about returned text. It stops short of describing failure modes or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.