Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false and openWorldHint=false, so the agent knows this is a non-read-only, closed-world operation. The description adds 'governance filters and sanitization' as behavioral context, but does not explain what state changes occur or what permissions are required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.