Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as read-only and idempotent, and the description adds meaningful behavioral detail: masked PII placeholders are never raw, the response may include a fields_hint when no dataset has been built, and execution_id is restricted to data_process jobs. These details help the agent predict responses and downstream actions beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.