Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say readOnlyHint=false and destructiveHint=false; the description adds material context the annotations cannot: share publishes a public expiring link, it needs manage permission, and results are valid only when both audits share strategy and device, with source-changed metrics flagged inconclusive. This is rich disclosure beyond structured data and is consistent with readOnlyHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.