Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and non-idempotency, so the safety profile is partially covered. The description usefully clarifies that the operation only prepares and does not publish, but leaves unexplained what state is created, why the candidate 'expires', or whether the preparation can be discarded.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.