Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly/idempotent/non-destructive), the description discloses non-obvious behaviour: only paid orders yield a result, the return is a link rather than the document, the customer must sign in to open it, and the invoice never passes through the assistant. These are exactly the operational facts an agent needs and cannot get from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.