Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safe read-only, idempotent, closed-world profile, so the description only needs to add what they cannot. Calling the review 'heuristic' meaningfully signals that findings are judgment-based and non-exhaustive rather than a deterministic ruleset, and the enumerated check areas tell the agent what kind of findings to expect. Return shape is covered by the output schema, so nothing critical is missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.