Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only mark the operation as non-open-world and non-destructive; the description adds meaningful behavioral context: it evolves an existing template, creates an unpublished draft by default, and can publish immediately with publish=true. It stops short of disclosing error/auth/validation outcomes, but the schema describes that the owning service validates on submit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.