Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Far exceeds the annotations (readOnly=false, destructive=true, idempotent=false): it discloses the state guard, conflict-on-invalid-state refusal, that exactly one activity event is recorded with the user, that history is retained, and that retrying after uncertain delivery can fail the guard or duplicate an event after intervening moves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.