Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=false, destructive=false, openWorld=false, and the description adds genuine context beyond them: the archive and trash regions are included, and existing files are not overwritten. It does not address auth, timing, or output location, but the non-overwrite disclosure is exactly the kind of behavioral fact an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.