Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (non-destructive, non-idempotent, closed-world), the description discloses what annotations cannot: the note is visible to every member of the employer's account, it is attributed to the calling member with a 'via this app' signature, and it is strictly append-only. That is exactly the kind of contextual risk information an agent needs before writing free text.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.