Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=false, and destructiveHint=false, covering the safety profile. The description adds the auth requirement, which is genuinely useful context, but is silent on the practical consequence of non-idempotency — e.g. whether a duplicate name errors or creates a second tag.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.