Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint and non-destructive, so the safety profile is covered. The description adds real context beyond that: 'Private' signals data-sensitivity, and the explicit claim that it records only what another party stated (not invented clinical steps) frames its epistemic scope. The word 'records' sits in mild tension with readOnlyHint, but the leading 'read-only' framing keeps it from being a true contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.