Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only provide generic flags (non-read-only, non-idempotent), so the description carries the behavioral burden and does so well. It discloses two important traits beyond the flags: automatic folder placement when suggested_folder is omitted, and hard failure on path collisions. This gives the agent actionable expectations about side effects and failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.