Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-destructive, idempotent, closed-world write semantics, and the idempotencyKey parameter description covers replay safety. The description's only added behavioral context is the word 'private' (visibility scoping), and it says nothing about what happens on a duplicate key or how the recipe is scoped to the household.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.