Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=false, and openWorldHint=true, so the safety profile is covered structurally. The description adds nothing beyond them: no mention that a sent message cannot be recalled, no rate/anti-ban limits, no requirement that instance_id refer to a connected instance. For a destructive, non-idempotent mutation the description contributes zero extra signal.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.