Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the generic write profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false). The description adds a genuinely non-obvious side effect — the newly created workspace becomes active ("switch to it") — and the data-isolation consequence, both of which matter to an agent. It does not cover name-collision behavior or permissions, so not a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.