Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, openWorldHint=false and destructiveHint=false, so the agent knows this is a non-destructive local-side-effect operation. The description adds almost nothing beyond that: it doesn't say whether the run is synchronous or job-based, whether it writes output to the project, or whether the document is modified. With annotations carrying the safety profile, this still leaves meaningful behavioral gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.