Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, idempotent, non-destructive and closed-world. Beyond that the description discloses ordering ('strongest first'), result-shape limits ('up to 5 source filings per relationship'), what is deliberately not included, and the critical empty-set interpretation. It stops short of any auth, rate-limit or pagination detail, but for this access pattern that is a minor omission.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.