Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, so the safety profile is structured. The description adds meaningful authorization context: only the agent's own agent-scope memories can be deleted. It stops short of describing irreversibility, failure modes, or what happens to dependent data, but it transparently discloses the key access constraint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.