Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true and readOnlyHint=false, but the description goes well beyond them: it discloses that version history and track record are destroyed, other agents can no longer run it, repaired recipes stay published and are listed in the reply, the name is permanently retired, built-in recipes are protected, and a wrong key or mismatched name errors without side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.