Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare the tool is not read-only, not idempotent, and not destructive, but the description adds almost no operational detail. It does not say whether execution blocks until completion, how timeout_seconds affects the run, what happens on failure, or whether a behavior must first be submitted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.