Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, idempotentHint=false), the description discloses that the call may complete steps, schedule next steps, or re-dispatch people, consumes platform LLM, may trigger notifications, requires login, and has no persistent dedup key so automatic retries risk duplicates. The non-idempotency warning is especially valuable and consistent with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.