Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (which only mark it non-read-only, non-destructive, open-world), the description discloses the full side-effect chain — brain creation, a starting program from the library, publishing, and enrolling the place's members — plus the auth prerequisite (a connected Phorme account that owns the place) and the cost model (free on the free listing). It also encodes a consent gate via the confirmation flag.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.