Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, openWorldHint=true, and readOnlyHint=false, so the agent knows this is an arbitrary code execution surface with side effects. The description adds the useful 'sandbox' qualifier, but never warns that the executed program can invoke any external tool including destructive ones, nor mentions timeouts or execution limits. Useful context, but thin for a destructive execution tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.