Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=false, idempotent=false, destructive=false, and openWorld=true. The description adds the important non-schema constraint that the destination is exact and must not exist, but leaves out permission requirements, whether source directories are copied recursively, and what 'checkpoint' entails. With annotations covering the safety profile, this is a moderate addition.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.