Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent/non-destructive annotations, it discloses file-size cap (10 MB), result caps (2,000 revisions/comments, 20,000-char field truncation), refusal-without-charge behavior for unsafe/over-limit files, typical latency (<2 s), price (USD 0.005, no free tier) and a prompt-injection caution on returned text. That is unusually complete operational context that annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.