Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), and the description adds genuinely new behavioral context: 'no publication authority', synchronous execution, 'Task support: forbidden', and detailed response-handling rules (use assistantSummary first, never surface raw JSON, mention IDs only when useful). That is meaningful disclosure beyond the annotations, though it says nothing about pagination or failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.