Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, openWorldHint=true, and readOnlyHint=false, so the safety profile is covered structurally. The description adds useful context ("isolated sandbox", program must return its result), but it does not disclose what the destructive capability actually affects or any rate/permission constraints, and it defers the "full contract" to external server instructions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.