Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/openWorld, yet the description adds real substance beyond them: exactly what contact data is returned (email, LinkedIn, X, personal site) with provenance (the page it was published on and the quoted source text), what is never collected (phone numbers, home addresses), the public-source origin of the data, and a removal channel. That is meaningful behavioral and trust context an agent cannot infer from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.