Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description does real work: it discloses that execution is asynchronous, that a run_id comes back, and that the call consumes pipeline_run credits — the latter being a cost trait an agent must know before invoking. It does not cover failure behavior, whether the run can be cancelled mid-flight, or permission prerequisites, which leaves some burden unaddressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.