Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false and destructiveHint=false, so the mutation/safety profile is known; the description adds the non-obvious constraint that only one step is undone and that revertibility depends on the state of contained work. It does not say what happens when the precondition fails (error vs. silent no-op), which is the remaining behavioral gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.