Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare destructiveHint=true and readOnlyHint=false, signaling that arbitrary SQL is executed with mutation potential. The description adds one genuinely non-schema behavior — that xlsx output is base64-encoded — but says nothing about how csv/json are delivered (inline vs. written to disk), whether writes are committed, or any size/timeout constraints on large exports.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.