Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only/idempotent safety. The description adds domain-specific behavior: data is population-level only, unavailable cohorts are not extrapolated, scans are not interpreted, and pathology is not excluded. It does not cover auth or rate limits, but adds substantial context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.