Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so the safety bar is low, yet the description adds real behavior: stored sizes/budgets and alert clocks do not prove current price/stock/fit/delivery, the result is bounded with has_more=true signaling omissions, and it is scoped to the linked user. It also encodes output-rendering rules (Carrie/Colette attribution) that are not derivable from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.