Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, non-idempotent, non-destructive, closed-world. The description adds genuinely new context: it consumes the plan's project quota and requires only read access on the source. It stops short of describing naming collisions with an existing project or whether the copy is immediate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.