Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover the safety profile (readOnly, idempotent, non-destructive, open-world). The description goes well beyond: it discloses that references are verified against Crossref, PubMed and OpenAlex, that verified entries are re-formatted from the database record (correcting wrong years/pages/authors), and that unverified entries are flagged in entries[].warnings. That is exactly the correction/network behavior an agent needs and cannot get from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.