Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-destructive, closed-world, non-read-only behavior. The description adds useful scope context by stating that no contact details or project description are accepted or sent, but it does not explain what the prepare step actually creates, how long the handoff remains valid, or why an idempotency key is required despite idempotentHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.