Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, destructiveHint=false and openWorldHint=true, so the mutating-but-safe profile is covered. The description adds the folder 0/1 exclusion and the dry-run default, but is silent on permissions, reversibility, and error behavior beyond 'Dry-run by default' (which also restates the schema default).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.