Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses that credits are spent, that the definition gets locked, that cost changes invalidate approval, and gives explicit output-handling guidance (show the returned url link, never expose backend run/test IDs). The destructiveHint/openWorldHint annotations are corroborated and enriched rather than merely restated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.