Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses the two-step workflow (pass relative paths, then run the returned command with bash from that folder), the signed-URL mechanism with a 30-minute expiry, the overwrite rule ('A path that exists replaces the file'), and a 50-file cap. This is exactly the operational context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.