Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, non-destructive, non-open-world behavior. The description usefully adds that the call is free and that 'existing source and input limits apply', which is real operational context, but it says nothing about failure modes or what validation output/errors look like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.