Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, and the description still adds real substance: the definition comes back as a JSON string body plus a checksum, and omitting version defaults to latest. It stops short of covering error behavior for an unknown slug or version, which would complete the picture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.