Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this is a non-read-only, non-idempotent, open-world mutation, so the safety profile is covered structurally. The description adds nothing beyond that: no statement of which batch operations are supported, what gets mutated, whether it requires elevated permissions, or how failures in a batch are reported. For a write tool that is a real gap, but annotations keep this above a 1.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.