Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, and the description adds substantive behavior beyond that: it discloses the untrusted-text fields (title, body, author_name, reply) as a prompt-injection guard, and explains two non-obvious states — setup_required (no app connected, don't report zero reviews) and syncing (first sync still running) — with prescribed agent handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.