Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (which only say non-destructive, idempotent, non-open-world), the description discloses that the call is asynchronous and returns immediately with a job handle, that the snapshot is immutable, and what the snapshot records (geometry, layers, warnings, persistence source). This is exactly the behavioral context the annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.