Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Only destructiveHint=false is supplied by annotations, and the description fills the real gap: creation is non-atomic ('前成功不因后失败回滚'), results come back bucketed as created/failed, every task pushes a notification to its assignee, login is required, and there is a practical cap rationale. These side-effect and partial-failure semantics are exactly what an agent cannot infer from the schema or annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.