Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=true, so the safety profile is covered. The description's valuable addition is 'non-secret', which tells the agent no credentials are exposed. However, it doesn't clarify whether 'export' returns data in the response or produces an artifact, nor whether authentication is required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.