Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by stating hard operational limits (http/https, 10 MB, 10 s), the robots.txt and private-address policy, the failure modes that are not charged, and the exact cost and payment rails. For an openWorld, paid network call this is exactly the context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.