Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses critical behavior: returns a batchId immediately, has NO batch-get endpoint, and requires polling via list_workflow_runs. The 'do not re-submit' warning complements the idempotentHint=false annotation with concrete guidance.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.