Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds genuine value beyond that by enumerating the returned field groups (name, company, phones, email, address, workflow status, lead source, sales rep, custom fields), which matters because there is no output schema. It does not mention auth scope, rate limits, or missing-record behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.