Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, openWorld), and the description adds substantial context beyond them: latency range (0.2-1 s), pricing (USD 0.002), a free-tier rate limit (10 chain reads per IP per UTC day), the forward-verification semantics that flag spoofed reverse records via `verified`, and a prompt-injection warning about on-chain strings.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.