Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal mutation via readOnlyHint=false and idempotentHint=false. The description adds useful behavioral detail: the operation is performed immediately on a running VM and persists across reboots. However, it does not disclose side effects such as replacing an already-mounted ISO, error behavior, or prerequisites beyond the VM running.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.