Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry destructiveHint=true and idempotentHint=false, so the agent knows this is a destructive write. However, the description adds no behavioral context beyond the bare word 'delete' — e.g., whether deleting a category affects existing transactions, whether built-in categories are excluded, or what happens when two of the same category are provided.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.