Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover idempotentHint and destructiveHint, and the description adds the crucial caveat that the first open by the owner pre-fills blank fields from the main profile — so it is not purely read-only despite looking like a getter. It also discloses return-shape privacy behavior: contact details are never returned in plaintext, only hasContact + contactMode, so they don't enter conversation context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.