Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover idempotent and non-destructive behavior. The description adds the 'soft-deleted' detail and 'trash' context, which clarifies the state of the target, but does not disclose additional side effects or permission requirements beyond what annotations imply.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.