Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true and non-idempotent, but the description adds value beyond them: the number is never reused, and restore recovers deciders, links, and versions. It also discloses the task-change permission requirement. What is left implicit is whether the deletion is immediate or soft, but the recovery detail largely covers the risk profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.