Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already indicate destructive, non-read-only, non-idempotent behavior, so the bar is lower. The description adds useful behavioral context by specifying the success/error return shape and the need to source ability_name from discover_abilities. It does not elaborate on side effects, but annotations cover the main safety signal.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.