Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world behavior, so the safety profile is covered. The description adds genuine semantic detail beyond annotations – the exact normalization pipeline (lowercase, ASCII-fold, strip special chars, hyphenate spaces) – which tells the agent precisely what the output will look like, though it says nothing about edge cases like empty results or length limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.