Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, it discloses real behavioral traits: only accepted responses are counted, both responses:read and forms:read scopes are required, and the payload (verbatim respondent quotes) is untrusted. The auth requirement and security warning are exactly the kind of context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.