Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only/idempotent behavior; the description adds the key behavioral trait that this is a structural (algorithm-based) check, not a registry query. It does not discuss output behavior or edge cases, but output schema exists and safety annotations cover side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.