Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the safety profile is covered. The description does add genuine scope expectations beyond that: it tells the agent what will NOT be returned (names, passages, private identifiers) and that counts are 'source-reported', which sets expectations about fidelity. It stops short of saying what happens when the ID is unknown or refers to a non-public document.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.