Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true and idempotentHint=false, but the description goes well beyond them: it declares there is no undo in this session, prescribes checkpointing first, and explains that live filters, mask channels and the filter record survive the crop. The note that this is 'the one geometry change that never refuses because of masked filters' is distinctive behavioral context an agent cannot get from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.