Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses that installed blocks keep their WordPress ID, that files are rewritten without creating a backend version, and that the result is indistinguishable from a locally built block. It stops short of explicitly flagging that local file edits are overwritten (destructive potential) or any permission/auth requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.