Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the annotations (which only flag readOnly=false, destructive=true, idempotent=true): it discloses the execution identity (runs as the user), a scheduling constraint (outside quiet hours), a negative capability list (never submits a bid, messages a buyer, declines a tender, emails outside the team, or changes workspace membership), and the authorization model (owners, admins, bid leads). No contradiction with destructiveHint — 'acts on the team's pipeline as its rules say' is consistent with a mutating, enabled-side-effect tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.