Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint, and the description goes well beyond that: it discloses the login/auth precondition, the corpus limitation, the recency policy ('近期更正优先,旧话或过时'), the bounded result set, and the crucial negative-result caveat ('没命中不等于没说过'). That last point prevents an agent from concluding the user never said something, which is real behavioral value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.