Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a non-destructive, non-idempotent, closed-world write, so the marginal bar is low, and the description does add substantive context they do not: the folder is staged and never published to the live container. It omits what happens on a name collision and where exactly the staged folder lives, which keeps it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.