Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, non-destructive, and closed-world, so safety is covered. The description goes beyond them by disclosing the output shape and ordering ('worst first', what's expected, the first step, a paste-ready AI prompt), which matters because no output schema exists. It omits edge cases such as behavior when no audit has run or how many findings are returned, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.