Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, openWorld, idempotent, and non-destructive, so safety is covered. The description adds genuinely useful semantics beyond that: results are live and unchecked, and carry a separate unchecked label, which tells the agent how to treat the output. It stops short of noting latency, rate limits, or that results may be incomplete relative to the indexed corpus.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.