Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent and non-destructive, so the description's job is to add constraints — and it does: a hard 92-day window, counts-only with no message text, and that results are subject to the org's AI access and privacy settings, meaning rows can legitimately be missing or empty. Those are real behavioural facts an agent cannot get from the annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.