Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and openWorldHint=true, so the safety profile is covered externally. The description adds value by disclosing the bundled payload: branches, latest commits, open PRs, permission flags, and git_link-linked server folders. It does not cover pagination, freshness, or error behavior (e.g., repo not found / access denied).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.