Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, and "Read-only, free" merely restates that. The genuinely additive part is disclosing which endpoints are fetched (/.well-known/skills/index.json or /.well-known/agent-skills/index.json), which tells the agent what network probing occurs, but nothing is said about failure modes or result shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.