Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare it is a non-read-only, non-destructive, non-idempotent, closed-world call. The description adds genuinely non-obvious behavior: it consumes credits like a normal answer, and it does not create a customer conversation. It does not say whether tests are logged or retrievable afterward, which is the remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.