Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructive=true, idempotent=false, openWorld=true, so the safety profile is known. The description adds genuinely new context beyond that: the batch nature, the cost implication of multiple test runs, and the need for prior approval. It stops short of describing what happens if part of the batch fails or whether queued runs can be cancelled.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.