Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnly, idempotent, non-destructive, closed-world), so the description has less burden. It adds the computation basis and mentions the return shape, but since an output schema exists that information is redundant. No deeper behavioral traits such as edge cases, validation limits, or permission needs are disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.