Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only and idempotent annotations, the description discloses concrete behavioral boundaries: it reads only the bounded brief, verifies project ownership when supplied, does not call providers or remote MCP servers, does not fetch URLs from the brief, and does not edit Canvas or trigger jobs, approvals, pricing, or generation. This is unusually rich transparency for an advisory tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.