Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint=true and readOnlyHint=false, so the mutation is known. The description adds useful behavior beyond that: it refuses on non-empty folders and guarantees it never deletes an app, giving the agent a precise safety boundary. No contradiction with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.