Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, readOnlyHint=false, destructiveHint=false. The description adds the behavioral context that the mainline is read-only during experiments and that HEAD determines what can be modified. It doesn't describe side effects like whether working tree changes are preserved or whether checkout fails on dirty state, but the annotations cover the safety profile reasonably.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.