Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, non-destructive, non-idempotent, closed-world. The description adds real context beyond them: the request goes to the author and approval propagates to every presentation in the project, including ones added later. It does not say whether repeat calls re-notify the author or what state the request starts in.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.