Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare non-read-only, non-idempotent, non-destructive, closed-world behavior, and "immutable local storage" adds a useful detail: the tool materializes a snapshot rather than working in place, which is consistent with the write-flagged annotations. However, it says nothing about where that storage lives, what happens if the path was already opened, whether re-invocation creates duplicates, or any permission requirements. Given the annotation set already covers the safety profile, the description contributes some but not much behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.