Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true and idempotentHint=false, and the description earns credit by explaining why: it stamps completer identity and timestamp, and a recurring task spawns its next occurrence, so repeat calls are not neutral. It still doesn't address permissions or error behavior for an unknown/already-complete task.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.