Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare a non-read-only, non-destructive, idempotent operation; the description adds real value on top by imposing a per-conversation dedupe rule, a privacy constraint ('Do not include personal data about the user'), and the fact that the message must be self-contained for a reader without the conversation. It does not say what happens to a submitted report or who consumes it, but the output schema covers the response side.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.