Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world behavior, so much of the safety profile is free. The description's genuine addition is the cost disclosure ('5 credits'), which is real, actionable context beyond structured fields. It still omits anything about payload size or latency, which matters for a tool returning bio, rankings, ratings, career records, and 10 matches in one response.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.