Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose readOnly=false, destructive=false, idempotent=false and openWorld=true, so the safety profile is covered. The description adds the useful state precondition ('in-review'), but is silent on what actually changes (status transition, whether a rejection reason or reviewer identity is recorded) — notable because the schema carries only an id and no message field.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.