Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations carry only a title, so the description bears the full behavioral burden. "Private" is one useful trait, but there is no disclosure of who becomes owner, what permissions are needed, whether the group is discoverable, or what the caller receives back.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.