Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and openWorldHint=true, so safety is partly covered. The description still adds real value: the run persists server-side after the call returns, it yields a job id and web url for polling, and it requires the write scope. It does not mention rate limits, budget enforcement, or what happens when the run fails.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.