Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose readOnly=false, idempotent=false, openWorld=true, destructive=false, so the description needn't restate safety. But it adds almost nothing beyond 'keep a manifest' — no mention of async/non-blocking behavior, whether a handle is returned for later polling, or side effects. For a non-idempotent submission entry point with no output schema, this is a notable gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.