Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (read-only, idempotent, open-world, non-destructive), the description adds meaningful behavioral context: the RAG mechanism, the citation format, the AI layer requirement, and a security-relevant note that field values are treated as data, never instructions. This helps the agent invoke the tool safely and correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.