Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive), the description discloses substantial operational traits: distributions only scan the newest 2000 responses, a truncated flag signals a larger total, and free-text 'Other' values should be treated as untrusted. These are exactly the behavioral details an agent cannot get from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.