Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, but the description adds substantial behavioral context: results are in publication order rather than semantic-version precedence, this is not an upgrade safety assessment, backports may appear, and an unknown baseline surfaces in data.status rather than being silently treated as no changes. That is exactly the kind of nuance annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.