Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, closed-world semantics. The description adds genuinely new context: full RFC 4180 handling, quoted fields with embedded newlines/doubled quotes, unterminated-quote rejection with position info, and a 200 KB size cap. Only the exact error/return shape is left implicit, which the output schema covers.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.