Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only state it is not read-only, not idempotent, not destructive. The description goes well beyond that: it explains the reframing behavior (point/face/active-speaker focus), that the source's authored intent is copied, that a NEW INDEPENDENT composition is saved in the same project (source untouched), and what is returned. It also routes the agent onward to create_render or apply_composition.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.