Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false), so the bar is lower. The description adds genuine behavioral context beyond them: the retest inherits the original test's URL, custom goal, system prompt, and inbox configuration, which tells the agent the verification covers the identical flow. It does not spell out that each call creates a fresh job/run, which would complete the non-idempotency picture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.