Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered without the description. The only added context is 'the whole record', which is vague and does not disclose whether related data (groups, roles, contact details) is included or whether access is restricted by permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.