Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true, and readOnlyHint=false, so the safety profile is covered. The description still adds genuinely new behavioral facts the annotations cannot convey: that past runs and their results survive the deletion (blast radius), that user confirmation is required, and that the call is free. Auth requirements and return shape are the only gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.