Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true, openWorldHint=true and readOnlyHint=false, so the safety profile is partly covered. The description adds useful context (uses saved recipe and credit caps, approved delivery can publish to connected channels), but it never explains what makes resuming destructive or how the idempotency key affects retries.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.