Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this is a mutating, open-world, non-idempotent write; the description adds substantial context beyond them: it restarts the app, sets/unsets S3_PUBLIC_URL, exposes files with no gate or app request, keeps the file list private, and surfaces a warning to relay for restricted projects. This is exactly the extra behavioral detail annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.