Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide some safety info (idempotent, non-destructive), but the description adds little beyond the verb 'Start'. It does not explain what the workflow entails, whether it creates a long-running operation, or what side effects are expected. No contradiction with annotations, but the behavioral disclosure is shallow.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.