Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare read-only, idempotent and non-destructive, but the description adds genuine context beyond them: synchronous execution, task support forbidden, that the payload is internal orchestration state, and explicit presentation constraints (use assistantSummary, don't dump raw JSON, mention IDs only for follow-up). Those output-handling rules are useful behavioral guidance the annotations do not cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.