Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover safety flags (write, not idempotent, not destructive), and the description adds real context beyond them: what is copied (project + script), what is excluded (responses), and the resulting state (new project is inactive until opened). It stops short of noting that repeated calls produce distinct projects, but the annotations already flag non-idempotency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.