Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), and the description adds genuinely new behavioral facts: the listing is non-recursive and results are ordered directories-first. Neither trait is derivable from the annotations or schema, and both affect how an agent must loop through the tree. No pagination or empty-directory behavior is described.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.