Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=false, and openWorldHint=true, so the mutation/non-repeatable profile is covered. The description adds genuinely useful context by noting it does not block the MCP HTTP server, but it does not say whether the step completes asynchronously, whether WaitForPause is required afterward, or what 'Command execution result' actually contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.