Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/open-world, and the description adds substantial extra context: a 512,000-byte fetch limit, a 5-minute result cache, refusal of private/loopback/internal addresses, default-port-only restriction, a single GET with a specific user-agent, and the fact that output includes validation errors and warnings. These are exactly the operational traits annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.