Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint/openWorldHint/destructiveHint, so the safety profile is covered; the description nonetheless adds genuinely non-obvious behavior: per-file failures do not abort the batch, images are rendered for PNG/JPEG/GIF/WebP, and access is confined to allowed directories. It stops short of stating size limits, output ordering, or how partial failures are reported.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.