Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so safety is covered. The description adds that recipes are 'verified for one job' and that the result 'always says what to do next', which hints at the payload's nature. It stops short of detailing what the response contains or how a project with no recipes behaves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.