Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld, non-destructive, so the safety profile is covered; the description adds non-obvious behavior: it reads live recall data, emits XLSX and CSV files, caps at 1–100 items, and carries accuracy caveats ('word matches require verification', 'models written with spaces can be missed'). It stops short of covering runtime or what happens to unmatched items, keeping it below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.