Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=false, and openWorldHint=true. The description adds one genuinely useful behavioral fact beyond that: the reply is private, which distinguishes it from public task messaging. However, it never explains why the call is flagged destructive or non-idempotent (e.g. whether an answer is final/irreversible), leaving the annotation profile unelaborated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.