Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/openWorld annotations: discloses credit costs (1 vs 3), that include_metrics makes the HTML page the 'sole content request', that voting data is fuzzed so estimates are approximate, which fields are unavailable anonymously (share, repost/crosspost, views), and that a Redlib fallback preserves source.type and credit weights. This is exactly the kind of operational context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.