Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotent=true, destructive=false, and openWorld=false, so the safety profile is covered. The description adds non-obvious behavior the annotations cannot convey: partial-list semantics (unmentioned items retain relative order and move after the listed ones) and the visibility consequence that guests see this order. Permission requirements and error handling remain unstated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.