Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, openWorldHint=true, and destructiveHint=true, so the agent knows this is a state-changing, externally visible operation. The description usefully adds that it will not provision or install an OS, which prevents a common misconception, but it never addresses the destructive flag, idempotency, or whether the call blocks until the VM is ready.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.