Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds real value beyond the annotations: it warns that steps actually fire (texts, emails, webhooks) and recommends user confirmation, which is more concrete than openWorldHint=true alone. It omits whether execution is synchronous, what the response returns, and that repeat calls re-execute (annotations carry idempotentHint=false but the description never reinforces it).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.