Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world. The description adds real behavioral content on top: what the output is (exit criteria, tests and checks per phase), its provenance (findings from recorded real runs), and notably that it 'Returns instructions to follow with the user's text' rather than data. That return-shape disclosure is the useful addition; pagination/format specifics are left to the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.