Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, and openWorld=false, and the description partly duplicates them ('Classification: read-only'), which earns no credit. It does add genuine behavioral context: results may be partial, it never publishes creative, opportunities are recommendations, and it discloses an orchestration contract (assistantSummary-first, no raw JSON).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.