Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (destructiveHint, idempotentHint, readOnlyHint=false), the description discloses real behavioral consequences: an empty defaults list is valid, prompts without an override run globally, existing prompt overrides are left untouched and may still select the region, and the allowance is computed as the union of defaults and enabled overrides. This is exactly the side-effect detail an agent needs before invoking a destructive mutation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.