Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description adds genuinely new context: this is an internal view-scaffolding endpoint that an agent should not invoke directly, which is behavioral information the annotations cannot convey. It stops short of saying what happens if called outside the view, keeping it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.