Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only/idempotent/non-destructive safety, so the bar is lower. The description adds valuable behavioral context by enumerating internal steps (token budgeting, citation numbering, system instruction injection, source attribution), which helps predict output structure. It doesn't disclose edge-case behaviors (e.g., truncation strategy) but exceeds baseline.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.