Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds only the trivial phrase 'on the host' and otherwise repeats the title. It does not disclose behavior such as whether stopped containers are included (relevant to the `all` parameter), whether pagination exists, or that an active SSH session is required. With annotations present, the description contributes little beyond them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.