Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so restating 'Classification: read-only' is largely redundant. It does add value beyond annotations by disclosing synchronous execution, forbidden task support, and orchestration behavior (use assistantSummary first, never surface raw JSON, mention IDs only when useful). That output-handling contract is genuinely useful context not covered by structured fields, but the repetitive safety restatement dilutes it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.