Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations at all, the description carries the safety burden and does so reasonably: it declares the tool read-only, tells the agent the data is cached, and warns that results carry a freshness status and source disclaimer. What is not disclosed is update cadence, whether listings include application links, or any rate limiting.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.