Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and that this is neither read-only nor idempotent, so the risky nature is covered structurally. The description adds genuine extra behavior – the invoked tool's own constraints govern, drafts remain drafts, privilege levels are respected, and 'confirm: true' means the user already assented – which is real context beyond the annotations. However, phrases like 'a place its level' are cryptic and no failure, permission, or passthrough behavior is spelled out.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.