Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, and non-destructive, so the safety profile is covered; the description adds genuinely new context: the call is free (no credits) and results are capped at 500 per call. It doesn't describe what happens if the job is still running, which is the one behavioral gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.