Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the agent knows this makes no changes, and the 'dry run' wording is consistent with that. The description adds a real constraint beyond annotations — scope 'only inside the writable decks' — which is genuinely useful context, but it omits what the dry run produces (a plan) and how it feeds the apply/reject flow.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.