Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and openWorld, and the description reinforces the safety profile by enumerating the things it will NOT do (create, read contents, charge, mail). What it omits is what the call actually yields for the agent's next step and whether repeated calls re-render or accumulate; the output schema covers some of that, so 4 rather than 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.