Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, closed-world and non-destructive, so the safety profile is covered. The description adds real behavioral value beyond that: it discloses the return payload (bounded preview, original download URL, metadata, expiration), notes that PDFs and extracted content return links instead of images, and explains multi-output selection.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.