Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the destructive/non-idempotent annotations, it discloses authorization needs (moderator rights, write consent), optimistic concurrency (stale revisions rejected without changes), merge semantics (omitted fields unchanged, empty strings clear), full-replacement behavior for notes, and the specific side effect of applicant_name on workspace naming.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.