Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description adds two genuinely extra behavioral facts: data provenance ('no online collection') and a staleness caveat ('counts may have a different observation time than lists') that an agent needs to avoid misreading counts against list results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.