Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: disposable staging, immutable original/transformed bytes with dependency/installer provenance, explicit non-actions ('does not execute source, convert arbitrary HTML or mark it CueFrame compatible'), and the 'never force-overwrite authored work' safety rule. The commandId retry-identity note nuances idempotentHint=false rather than contradicting it, since dedupe only applies to a repeated identical commandId.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.