Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructive=true, idempotent=true, and readOnly=false, so the safety profile is covered. The description adds genuinely useful nuance beyond them: cancellation only affects future steps and pending deliveries, while an already-claimed or in-flight delivery may still complete — exactly the residual-risk detail an agent needs before deciding to cancel.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.