Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
This description discloses several behavioral traits beyond the annotations: it reveals the existence of a stored snapshot (state), explains caching behavior ('allow cache reuse'), and states a clear limitation ('does not execute JavaScript or bypass access controls'). With annotations that only hint at side effects and external calls, the description adds substantial context about how the tool operates.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.