Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=false, idempotentHint=false, and openWorldHint=false, so the safety profile is covered structurally. The description adds valuable workflow context (the dependency on list_workspaces/list_folders and the user-confirmation step) but says nothing about what is copied, permissions required, or that repeated calls create separate copies.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.