Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly=false, destructive=false, openWorld=false), the description discloses substantial behavior: text creates an assistant-local prompt without mutating a shared library prompt, permanent-assistant gating on active WhatsApp integration routes, that the provider-hosted phone prompt is left unchanged, archived vs disabled integration handling, and the UNSUPPORTED_CONFIG_MODE error. This is rich, non-redundant behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.