Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and openWorldHint=false, so the safety profile is largely covered. The description adds useful context that it runs in real Docker capsules and is not a model evaluation, though it says nothing about side effects, runtime cost, or what the demo produces. Note a mild tension: it calls the demo 'deterministic' while annotations set idempotentHint=false, though determinism of output and idempotency of side effects are not strictly the same claim.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.