Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, openWorldHint=false, so the write/closed-world profile is covered. The description adds an authorization scoping rule and a warning that shared seen state is not proof of receipt, but omits what state changes on registration, whether the call is idempotent when the actor already exists, and what errors occur for unauthorized spaces.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.