Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, idempotent, non-destructive, and closed-world behavior, so the safety profile is covered. The description adds useful substance beyond that: the exact validation rules applied and the return shape (PASS/FAIL verdict, 0–100 score, errors/warnings with JSON-pointer locations). Minor gap: it doesn't say whether validation stops at the first failure or reports all issues.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.