Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/openWorld=false, so the bar is lower. The description adds genuinely new behavior: a 6000-character return cap, the exact payload contents (source text, URLs, status, provenance), and the important scope constraint that it never fetches arbitrary external URLs, which reinforces the openWorldHint=false annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.