Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint, idempotentHint, and destructiveHint, so the description adds context beyond these, such as 'metadata review only' and the explicit exclusions (no malware scanning, no safety guarantees, no installation approval). This enhances transparency without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.