Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructive/mutating behavior, and the description goes well beyond them by disclosing partial-failure semantics: it moves every id it can, and reports permissionDeniedIds, refusedIds (self/descendant folder loops), and unresolvedIds while still moving the rest. This is exactly the failure-mode context an agent needs for a destructive batch operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.