Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond annotations: required Microsoft sign-in with blog.write scope, single-use link, 15-minute expiry, presentational constraint never to fetch the link, access limited to the engineer's own drafts/posts with site-owner exception, and a note that the email editor link is unaffected. Annotations already mark it non-read-only and non-idempotent, and the description consistently reinforces that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.