Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds behavior beyond annotations: unsafe SVGs (scripts, event handlers, remote references) are refused, and re-reviewing with a token is free, which the non-idempotent annotation alone wouldn't convey. The readOnlyHint=false profile is consistent with a rendering/validation operation, and it discloses the rejection policy rather than just the safety flags.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.