Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, non-destructive and closed-world, so the safety profile needs no restatement, and the output schema covers return values. The description adds that the plan is derived deterministically from explicit capabilities and risks, but says nothing about determinism of recommendations, depth/verbosity of the plan, or limits on the scenarios it can cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.