Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, it discloses the ranking basis (how often other agents reported success), the return shape (up to 5 candidates with install details, docs/OpenAPI links), the ticket artifact, and a prompt-injection warning about public-directory text. These are behavioral traits the annotations do not carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.