Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, idempotentHint=true. The description adds genuine context beyond that: it scopes the destruction to staged files only ('live site is untouched') and discloses failure handling ('cleanup is best effort and retried later'), which directly explains why destructiveHint is false. It omits auth/permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.