Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, openWorldHint=true, and idempotentHint=false, so the safety profile is structured. The description adds genuinely useful context beyond them: execution is shell-free ('no shell parsing'), and launching can execute code and change desktop state. It does not discuss permissions/auth or failure modes, but the annotation layer carries much of that burden.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.