Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations give readOnlyHint=false, destructiveHint=false and idempotentHint=true, so the safety profile is partially covered. The description adds real behavioral context beyond that: the saved artifact is an inactive draft, no credits are spent, nothing is published, and the automation type must match — useful for a write operation with an idempotency key.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.