Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses the verified-key requirement (Bearer rk_…), the dedup behavior ('re-sharing identical bytes returns the existing record with deduped=true'), and downstream visibility ('Shared files appear in list_files for everyone in the room'). The annotations only cover the safety profile; these operational traits are genuinely additive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.