Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already carry the safety profile (readOnlyHint, idempotentHint, non-destructive), and the description adds little behavioral context beyond the source provider and an output-field list. It does not disclose rate limits, symbol-support limitations, or any response caveats, so most of the behavioral burden remains on the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.