Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, openWorldHint=true and idempotentHint=false, so the mutation and risk profile is known. The description adds real context beyond that: 'Navigation protection blocks unauthorized destinations,' which tells the agent the action can be refused for policy reasons. However, it never says what a block looks like (error vs no-op), nor that going back may discard forward history.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.