Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With readOnly/idempotent/openWorld annotations already covering the safety profile, the description adds real operational context: hard limits of 8 s, 5 redirects, 768 KiB, and 50 sitemap declarations, plus the caveat that the answer is guidance rather than authorization. It stops short of stating behavior for the common edge cases — robots.txt missing (404), unreachable, or non-200 — which materially affects how an agent should interpret the result.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.