Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, destructive, and idempotent, so the safety profile is covered structurally. The description adds the useful constraint that ALL pending changes are committed rather than a selected subset. It omits whether the commit is reversible, whether it pushes/deploys, or what the response reports.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.