Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and openWorld, so the safety profile is covered. The description adds genuinely non-obvious traits: per-source size ceilings (4 MiB money-market, 1 MiB otherwise), a warning that source JSON is untrusted, that packets may be partial, and that no verification is performed. Those caveats materially affect how an agent should trust and handle the output.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.