Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds real behavioral context beyond the annotations: each call appends a commit rather than replacing history, and the first invocation requires a repository target. It does not cover auth/permission requirements, though destructiveHint=true and openWorldHint=true already flag the safety and external-impact profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.