Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safe read-only, idempotent profile, but the description adds genuinely non-redundant behavior: the payload is advisory ('suggested steps, not commands'), no schedule executes server-side, and consent is required before creating anything recurring. It also flags that scheduling requires offering xTiles notifications, which is an operational trait the agent could not infer from `readOnlyHint`.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.