Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even with readOnlyHint and openWorldHint declared, the description adds substantial behavior: truncation of out-of-snippet line numbers, a model-written caveat that findings are leads rather than verified defects, and a full pricing/charging model (x402, USDC, failed calls not charged). This goes well beyond what the annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.