Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, openWorldHint=true and idempotentHint=false, so the safety profile is covered. The description adds the useful constraint that only catalogued non-read-only operations are accepted and that deletions must be explicitly requested, but says nothing about error behavior, argument validation, or what happens if the target operation fails.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.