Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, non-destructive, closed-world and idempotent, so the safety profile is covered; the description's contribution is the cursor-like behaviour (only output produced since the previous read). That is genuinely useful context, but it omits blocking/timeout semantics and what happens when the session has ended. There is also a latent tension worth surfacing: a cursor-advancing read is not strictly idempotent, which sits awkwardly with idempotentHint=true.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.