Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the annotations (which only cover readOnly/idempotent/openWorld safety): it discloses login requirement, server-side revalidation of alliance identity and directory authorization, hidden/test isolation, 50-per-page pagination with cursor, total only on page one, and – critically for downstream behavior – that isCloud=true people haven't used the App and cannot be chatted or assigned tasks, and that phone numbers are never returned. That last point is important behavioural context because the schema cannot express it. It doesn't contradict the readOnly hint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.