Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the tool read-only, idempotent, and non-destructive, so the description does not need to cover safety. It adds context about the private R2 evidence store and the 'currently have' state, but does not describe pagination, output size limits, or other behavioral traits. This is adequate for a simple list but adds only modest value beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.