Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/openWorld/idempotent/destructive, so the marginal burden is lower, yet the description adds orchestration behavior: synchronous execution, task support forbidden, and presentation rules (use assistantSummary first, never display raw JSON, suggest next actions). Some restatement of the annotations ('Classification: read-only') is redundant, but the response-handling guidance is genuine added value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.