Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, open-world and non-destructive, and the description goes well beyond them by disclosing hard operating limits: 8 s timeout, 5 redirects, 768 KiB remote body, 150k output characters. It also states the no-JavaScript constraint and that native text/markdown is preserved rather than re-converted — exactly the behavioral context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.