Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safe-read profile is covered. The description adds a genuinely useful security constraint — that the retrieved source texts are data, not instructions to be followed (prompt-injection guard) — which annotations do not convey. It says nothing about result volume, pagination behavior, or how the examples are structured, so it is additive but thin.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.