Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already carry the full safety profile (readOnly, idempotent, non-destructive, openWorld), so the bar is lower, and the description adds genuinely non-structured behavior: every result carries a 'ref' field in markdown-hyperlink form and the agent is told to inline it rather than emit a References section. That is a real output-handling convention not derivable from annotations or schema. It does not cover pagination or rate/limit behavior, keeping it at 4.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.