Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent and non-destructive, and the description adds genuinely new context: the catalog is local with no GitLab API call, so there is no auth or rate-limit exposure. It also previews what comes back (schemas, hints, destructive flags, execute examples), which annotations alone would not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.