Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), lowering the bar. The description adds genuine behavioral guidance beyond that: it instructs the agent to surface the calculator_url from the result as a clickable markdown link, which is not derivable from annotations or schema. It does not discuss limits or edge cases, but the safety burden is already met.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.