Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses important behavior: the URL is short-lived, the server verifies retained immutable package/document authority, bucket keys are rejected, and project-bound editors face additional jobId matching requirements. These details materially reduce the risk of misuse.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.