Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/destructive/closed-world safety, and the description reinforces it with 'Free, read-only.' Beyond that, it discloses genuinely new behavior: catalog-listing vs playbook-return modes, the inspect → plan → build timeline → review frames → export after a confirmed quote → deliver sequence, and which stage indicates the next file to open.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.