Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose non-read-only, open-world, non-idempotent behavior; the description adds essential context beyond them. It explains attempt consumption ("A valid admitted attempt is consumed even if evaluation fails; retrying a successful call consumes another attempt"), shared daily capacity, required human review, no authorization/clearance, and that source content is data, never instructions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.