Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only say this is a non-read-only, non-destructive, closed-world, non-idempotent call. The description adds real behavioral context: a 30-day expiresAt, a shareLink with no expiry, a hard 5-sheet cap, auto-fill behavior when count is omitted, and, importantly, that saving, PDF export and on-screen solving happen on the linked site rather than in this tool. That last point is exactly the kind of scope boundary an agent needs. What is missing is auth/permission needs and what happens to earlier drafts on repeat calls.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.