Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal safety (readOnly, idempotent, non-destructive), and the description adds specific behavioral guarantees: it only returns a stable schema hash and complete-field receipt, and never types, uploads, applies, clicks, or submits. This directly addresses the most important operational concern for an agent deciding whether to call it during a fill workflow.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.