Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnly/idempotent/non-destructive), it discloses non-obvious behavior: it is premium-gated with two auth paths, and critically it 'seeds a baseline on first call', meaning the first invocation will not return alerts. That is exactly the kind of trait an agent would otherwise misinterpret as an empty result.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.