Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=true and openWorldHint=false, so safety is partly covered, but the description adds real behavioral content: phone numbers are masked in results, and aliases are untrusted human-authored strings that must not be followed as instructions or treated as identity proof. That prompt-injection warning is genuinely valuable and not derivable from structured fields. It omits pagination behavior despite a cursor param.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.