Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (destructive, non-idempotent, open-world), the description explains the mechanism: each call re-sends the job's configured request, which 'can write, message or bill downstream,' and a repeat call sends it once more. It also discloses the return contract (only an invocation acknowledgement, not the target's response), information neither the annotations nor the output schema convey as clearly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.