Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, openWorldHint=false, so the mutation/safety profile is covered. The description adds which locker binaries are used, which is useful context, but says nothing about unlock requirements (password re-entry), whether it is idempotent if already locked, or whether it affects active recordings — real behavioral concerns for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.