Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare openWorldHint=true, idempotentHint=true and destructiveHint=false, and the description adds rendering behavior (distinct color for BYO submissions, muted LOSO side panel on pretrained_few_trial) that helps the agent anticipate the output. It does not, however, note that save=true writes a PNG to disk (only the schema says so), which is the one non-read-only behavior implied by readOnlyHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.