Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, open-world behavior, so the safety profile is covered. The description adds one useful behavioral caveat, that the backend matches only English names, but otherwise restates the returned fields, which the output schema already enumerates. No mention of matching semantics (substring vs prefix), case handling, or empty-result behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.