Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true and openWorldHint=false, so the safety profile is covered. The description earns credit beyond that by disclosing skip semantics for unreadable/absent ids and the exact CONFLICT trigger for stale revisions, which are not in the annotations. It omits the biggest remaining question for a destructive tool: whether rows are recoverable (trash_restore exists as a sibling) or permanently gone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.