Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=true, destructive=false, openWorld=false, so the safety profile is covered. The description adds beyond that: the operation is asynchronous and must be polled, a 'waiting' status exists, and score is only populated once the test is completed. It doesn't quantify rate limits or failure modes, keeping it at a strong 4 rather than 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.