Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnly, idempotent, non-destructive), so the description earns credit for disclosing behavior beyond them: dependent steps are skipped after a failure, nothing is retried automatically, each success counts as one execution, and per-input/result/response limits are 256 KiB. The work-budget and batch_work_limit skipping behavior is genuinely useful context. Minor deduction for restating the no-retry policy twice.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.