Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint, openWorldHint=false, idempotentHint=false), the description discloses that sourceSchemaContentHash is compared loudly against the pin, that the confidence number is consumed by the package's EvidencePolicy rather than this tool or the engine, and that downstream rows are fully computed with a proof graph on the same snapshot. That is meaningful behavioral context not derivable from annotations. No auth/rate-limit detail, so not a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.