Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), so this is a read-only deterministic lookup. The description adds genuinely useful context beyond that: matching is deterministic alias-based rather than generative, guardrails are derived from negated phrases in the input, and a bundle URL comes back. It stops short of saying what happens when no alias matches.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.