Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish a safe, idempotent read, but the description adds substantial non-structured behavior: message bodies are capped, media is metadata-only with specific fields, transcripts need another tool/scope, group messages conditionally include sender_phone/sender_contact_name/sender_hidden/sender_key, and sender_key is explicitly non-reversible. It also flags message text as untrusted customer-authored content, which is important safety context an agent cannot get from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.