Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, openWorld, non-destructive), the description discloses concrete operational limits — 8 s timeout, 5 redirects, 768 KiB body, 500 links — and that only 'one public HTML page' is fetched, which is exactly the behavioral context annotations cannot convey. It also states link normalization/deduplication and same-origin classification.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.