Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare it is a destructive, idempotent, non-read write; the description goes beyond them by naming two refusal conditions (loops and destinations that would 404), which tells the agent what failures to expect. It does not explain whether intermediate hops are removed or whether permissions are required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.