Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true, and readOnlyHint=false, so the safety profile is covered structurally. The description adds genuine value beyond that by explaining the blast radius (rules are inert config; deleting unfired config moves no candidates), which tells the agent why this destructive call is low-risk. It omits permissions requirements and the fact that request_id serves as an idempotency key.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.