Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is carried by structured data. The description adds the requirement that the caller must own the agent_id, which is useful authorization context, but it does not go further into behavior such as error conditions or ownership verification.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.