Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety and idempotency, so the description's real contribution is the default response composition (question, answer, summary, limitations, anchored sections) and the standing instruction to carry limitations through. It does not say what happens when a paper identifier does not resolve, which is the notable remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.