Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile needs no repetition. The description does add one behavioral fact beyond that: results contain only non-secret metadata (i.e., no private key material is returned), which matters for an agent deciding whether it can surface the output. It stops short of describing result shape, pagination, or empty-result behavior, and there is no output schema to fill that gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.