Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent/non-destructive annotations, the description discloses that nothing is fetched from the seller, that Tanod signs nothing (so the returned file is only a draft), the 404 vs 422 error semantics with the note that 422 is not charged, typical latency (<1s), price ($0.001), and the free tier (10 calls/IP/UTC day). It also flags returned page text and on-chain strings as untrusted. This is exactly the extra context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.