Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations (readOnlyHint=false, openWorldHint=true, idempotentHint=false, destructiveHint=false) already declare this can mutate external state without being safe to retry. The description surfaces the two execution modes, which is genuinely beyond the annotations, but says nothing about what a trigger actually does (open PRs? post comments? notify agents?) or that it is non-idempotent, which matters here.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.