Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With annotations already covering openWorld/idempotent/destructive, the description still adds what the annotations cannot: the message goes out as an email from the signed-in user, replies return to the account email, confirm records user approval, a daily send limit exists whose error is not retry-clearable, and secrets must not be included. 'Works on read-only connections because it changes nothing in the account' is scoped to the account and is consistent with openWorldHint=true (the side effect is outward, via email), so it does not contradict readOnlyHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.