Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare openWorldHint=true, readOnlyHint=false, idempotentHint=false and destructiveHint=false, so the safety profile is partly covered. The description usefully adds that only explicitly enabled integrations are reachable and that credentials are never exposed to the model. It omits, however, that the real effect depends entirely on the target tool, and gives no hint about auth failures or rate limits on external services.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.