Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered structurally. The description does add real behavioral context beyond that: 'PII is masked by default' warns the agent that returned values are redacted, which affects how results should be presented. However, it never explains how to request unmasked data, what fields are considered PII, or how partial matching and pagination behave.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.