Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description adds genuine behavioral information beyond that: results are partitioned into blocking and nonblocking gaps, and the tool explicitly will not resolve unknown requirements or execution permissions. That second point is a real scope limitation an agent needs when interpreting a clean result, though nothing is said about cost, latency, or whether assessment is deterministic across repeats.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.