Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations establish the safety profile (not read-only, not idempotent, not destructive, closed-world), so the burden is partly lifted. The description adds that id-based retries return partial per-entry results, which is useful behavioral context, but it omits what re-running a failed entry actually does to workflow state and any permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.