Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (not read-only, not open-world, not destructive), and the description usefully clarifies that the tool only *generates a link* rather than deleting anything itself. It says nothing about link expiry, required permissions, or whether the link is single-use, which matters for a credential-producing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.