Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=true, so the safety profile is known. The description adds genuinely new behavior: deletion is a soft mark rather than a purge, and there is a plan-then-confirm flow. It is slightly ambiguous about whether omitting confirm (default false) is what triggers the plan call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.