Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description explicitly states 'Execution: synchronous' and 'Task support: forbidden,' and reveals that the output is 'internal application state,' all of which go beyond the annotations. It also provides concrete handling rules (never display raw JSON unless asked, use assistantSummary first) that add behavioral context without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.